A provider wants customers in separate VNets to reach its supported service privately through their own private endpoints. The provider uses a supported Standard Load Balancer frontend. Which provider-side feature fits?

1. Azure Private Link Service
2. A public storage SAS token
3. A DNS zone delegation alone
4. A client-side resource lock