This message was deleted.

the only workaround I found was to run "az cli" command from pulumi itself which does use the private endpoint