Private Endpoint Should be Configured for Key Vault

Description:

An Azure Private Endpoint is a network interface that connects you privately and securely to a service powered by Azure Private Link.

The private endpoint uses a private IP address from your VNet, effectively bringing the service into your VNet.  All traffic to the service can be routed through the private endpoint, so no gateways, NAT devices, ExpressRoute or VPN connections, or public IP addresses are needed.

Traffic between your virtual network and the service traverses over the Microsoft backbone network, eliminating exposure from the public Internet.  You can connect to an instance of an Azure resource, giving you the highest level of granularity in access control.

Solution/Reference: 

Full instructions to perform this can be found here:

https://docs.microsoft.com/en-us/azure/key-vault/general/private-link-service?tabs=portal#establish-a-private-link-connection-to-key-vault-using-the-azure-portal