Apologies for the audio cracking!
This video I try to explain and demo 2 concepts:
Accessing Azure PaaS Data Services over Private Endpoints from Synapse
Locking down access to Synapse Studio to a particular Azure VNET via Private Endpoints