Logic apps with Private Storage Endpoints

Keen to understand it the logic apps implements the pattern mentioned at https://learn.microsoft.com/en-us/azure/logic-apps/deploy-single-tenant-logic-apps-private-storage-account and associated code https://github.com/VeeraMS/LogicApp-deployment-with-Secure-Storage

looking at the code at https://github.com/Azure/Integration-Services-Landing-Zone-Accelerator/blob/main/src/infra/scenario1/la/logicApp.json it seems like is enabled
"publicNetworkAccess": "Enabled", // Need to disable after deployment of all artefacts.

Start with src/infra/scenario1/la/logicApp.json and compare its publicNetworkAccess setting with the linked Microsoft private-storage guidance and associated deployment code. Determine the intended private endpoint pattern and what deployment state should exist after artifacts are provisioned; the issue does not define acceptance tests or a specific file set beyond this template.

Written by the indexing model from the issue text.