Securing Services without an ASE – Couple of Questions

I'm looking to harden my environment without an ASE due to the costs...I was doing some research and found a great vid https://www.youtube.com/watch?v=5P14Q--Q9vE

Are there any good reference docs from Azure to integrate multiple services with private links and vnet integration?

Also is there are good reference template to build off on?

​

Essentially wants to go the service endpoints, vnet integration and private links for services like webapps, funcs, storage accounts and keyvault.

​

One thing I've noticed is that once you turn on a privatelink to a function, it kills the external access which is great, but then you can no longer update the code via the portal. (which is fine but I wonder what other gotcha's)

​

I have seen that some privatelink services lose some features or not all of them work properly.