Azure API Management Standard v2 now has inbound private endpoint support. This means that connections to the service can come from private networks.