Did you know Resource instance rules for access to Azure Storage.

Did you know Resource instance rules for access to Azure Storage are now in public preview in all Azure public regions.

Some Azure resources cannot be isolated through a virtual network or an IP address rule. However, you'd still like to secure and restrict access to your storage account to only your application's Azure resources. You can now configure your storage accounts to allow access to only specific resource instances of select Azure services by creating a resource instance rule

for more information you refer to the MS documentation

https://docs.microsoft.com/en-us/azure/storage/common/storage-network-security?tabs=azure-portal

Accessing resource instance rules

Browse to the resource accoount and under the resource account you have networking section, simply select that

Managing virtual network rules

To modify vnet rules, simply select either add exiting network or create new network and apply the rule accordingly