Often customers using App Service Environment want to apply additional security features such as disabling TLS 1.0/1.1 or remove certain ciphers. In Azure Public you can use https://resources.azure.com to.
This is now officially documented: https://learn.microsoft.com/en-us/azure/private-link/private-endpoint-dns#government Azure SQL privatelink.database.usgovcloudapi.net Azure Automation privatelink.azure-automation.us Azure Table privatelink.table.core.usgovcloudapi.net Azure Blob privatelink.blob.core.usgovcloudapi.net Azure Files privatelink.file.core.usgovcloudapi.net DFS Storage privatelink.dfs.core.usgovcloudapi.net App Config privatelink.azconfig.azure.us Cosmos privatelink.documents.azure.us.
The use of the APPLICATIONINSIGHTS_CONNECTION_STRING in Azure Functions is now built into the runtime. Note my examples are for Azure US Government cloud but this can ultimately be used.