Secure Deployment needed, can't get past Policy for Private Endpoints

[willstMSFT]

We have a State customer who has an Azure Policy that doesn't allow any public endpoints. While we requested the customer bypass the Policy to move forward, they were not willing to. Could you modify the template to make the deployment include the deployment of the Private Endpoints, versus having it be a two step process?

[bjakems]

The latest version in main (1.2) deploys out private endpoints in step 1. In step 2, you must establish VPN connectivity since the resources are network restricted in order to deploy the code to the infrastructure. Which assets are you seeing that do not have private endpoints and are failing the Azure Policy? Please note, in the local.env you must set "export SECURE_MODE=true" in order for the deployment to leverage private endpoints.
Please review the documentation as there are other settings required here.