As a developer, I can peer my App Service environment to a private VNet that provides access to on-premises network resources

[day-jeff]

The requirement here was related to allowing connection via ExpressRoute back to their on-prem data center. This was so that the app can connect to services running on-prem.

This is about connecting to Contoso's private network, not about providing a private service endpoint.

My only knowledge of how to do this is that I found this Azure article about how to do it:

https://docs.microsoft.com/en-us/azure/app-service/web-sites-integrate-with-vnet

You'll see that the solution is explicitly NOT for ASE, as you get this "for free" with ASS. have heard John Doe and others assert that such a thing can't be done, but this article contradicts that assertion.

Notes:

• I don't know if this solution works.
• If it does work, I don't know if you can peer and route to an ER vnet.
• If is does work with ER, I don't know if Contoso would approve the approach.
• John Doe has said that ExpressRoute connectivity can be left out of scope for now. I suspect he's saying that because he believes it can't be done currently.
• We can probably consider this lower priority for now, but it is absolutely a longer term goal to enable App Service-to-ExpressRoute functionality.