I’m struggling to figure out the best way to achieve the following use case:

I want to be able to rotate an Azure SPN secret and store it in Key Vault. I’ve created a Logic App flow that is triggered via Event Grid and Everything is working perfectly, but if I want to implement it in a hardened environment where all of the Azure services are enforced with private endpoints, it slows me down, due to the fact that EventGrid doesn’t have any vNET integration.

I have a Logic App with a private endpoint and a Key Vault with a private endpoint. The Event Grid reaches the Logic App via an HTTP call. I guess I can use APIM with Application Gateway on top? any other smart way?

Any help would be much appreciated.

Thanks,