Connection to public trust domain to Endbenutzer DMZ can be established and connected to all Azure services on the public IP addresses from Endbenutzer WAN without having to communicate via the Internet.   Captured flow logs data get sent to a Log Analytics workspace where you can create your own log queries for further analysis. Business i