I’ve connected an Azure App Service to a storage account through a private endpoint. The private endpoint shows as approved, and the app is integrated with the right virtual network, but name resolution still appears to return the storage account’s public address.

What should I check to confirm that the app is using the private DNS zone correctly? I’m especially unsure whether the zone link alone is enough or whether the App Service’s network integration changes how DNS gets resolved.