Hi John, thanks for reaching out. A private endpoint is created from the managed VNET of Synapse to the Azure Function. See https://github.com/rebremer/securely-connect-synapse-to-azure-functions/blob/main/Scripts/2_setup_private_endpoint_Synapse_FunctionApp.ps1#L8 for the script where this is done.