You need to make sure your storage account is accessible only from your existing Azure virtual network and from on-premises location. How will you achieve it?