A financial services company is migrating an on-premises SQL Server database to Azure. Their security team requires that the database be deployed into a private virtual network with a native private IP address, but the team does not want to manage the underlying operating system or apply SQL Server patches manually. Which Azure relational service best meets these requirements?