[Clould-Services-Extended-Support] Cloud Service + VNet + Gateway/ ExpressRoute

[kieronlanning]

Based on the new VNet requirement in Cloud Services (Extended Support), is it possible to limit access to the Cloud Service itself via VPN Gateway or ExpressRoute in the same way Service Endpoints limit access to other services, such as Storage Accounts.

We have a scenario where we want to limit access to the Cloud Service to a set of public IPs and via ExpressRoute or VPN Gateway.