Your team is deploying an Azure App Service (Premium v3 plan) that must reach a backend PostgreSQL flexible server and internal APIs over private IP addresses inside a VNet. You created a new dedicated subnet named 'snet-appsvc' for regional VNet integration. During configuration, the portal reports that the subnet cannot be used for the integration. What must you configure on the subnet to allow the App Service to integrate?