An application run2 on VM1 and VM2. The application is being migrated from storage account key authentication to Microsoft Entra authentication.

You review the current configuration and identify the following:

• VM1 and VM2 each have a system-assigned managed identity.

• Each application instance requests tokens by using only the local system-assigned managed identity.

• Network access to storage 1 from VMI and VM2 is allowed.

• No Azure RBAC data roles are assigned to the managed identities on storage1.

You need to enable the application on VM1 and VM2 to read and write blob data in storage1 by using Microsoft Entra authentication without changing how the application requests tokens.

Solution: You create a private endpoint for the blob service of storage1.

Does this meet the goal?