Your company runs a web app on an App Service plan (Standard tier) in Azure. The application must make outbound calls to an Azure SQL Database that has been configured to accept traffic only from a specific subnet in a virtual network via a service endpoint. The App Service must reach the database over the virtual network without exposing the database to the public internet. Which App Service networking feature should you configure?