If there is a private endpoint between a VM and an Azure SQL Database, should place both the resources in the same Vnet? or can I have them in the different vnet and different region? How to design the correct architecture and what are the scope of project that we need to collect from the client for the better understanding?