Hi Khoa,
Welcome to Microsoft Q&A Forum. Thanks for posting you query here!
You can use a SAS URL for a private Azure Blob in a compare API. A SAS URL provides secure, delegated access to your Azure Blob storage, allowing you to specify permissions and duration for access.
To use a SAS URL with a private endpoint,
Generate a SAS URL: Create a SAS token for your Azure Blob storage using the Azure Portal, Azure CLI, or Azure Storage SDKs.
Modify the URL: Replace the storage account name in the SAS URL with the Private Link URL of your storage account. For example, if your storage account name is mystorageaccount and the Private Link URL is myprivatelink.blob.core.windows.net, replace mystorageaccount.blob.core.windows.net with myprivatelink.blob.core.windows.net in the SAS URL,
Ensure that the client making the request is connected to the same virtual network or Azure ExpressRoute circuit as the storage account, and you can use Azure's REST API to include the SAS URL in your requests. This method allows you to append the SAS query string to your existing source URL and target URL values,
For more information:
Createshared access signature (SAS) tokens for storage containers and blobs - AzureAI services | Microsoft Learn
Please do not forget to "Accept the answer” and “up-vote” wherever the information provided helps you, this can be beneficial to other community members.