Azure Container Apps now has private endpoint support for workload profile environments. This allows these environments to connect without using public networks.