In a Platform as a Service (PaaS) environment, the network security controls of the underlying Virtual Network (VNet) or Virtual Private Cloud (VPC) are often inherited by the PaaS services. This means that the network security settings, such as firewalls, security groups, and access control lists (ACLs), that are applied to the VNet/VPC also extend to the PaaS services, providing a seamless security model.
While PaaS services abstract much of the infrastructure management, they still interact with the network security controls in the VNet/VPC, allowing for centralized management of network security.
PaaS services typically do not override network security controls; they integrate with them. They do interact with VNet/VPC security controls, often integrate with network security controls, and do not always require separate manual configuration.

Secrets management focuses on securely storing and managing sensitive information, such as API keys and passwords, to prevent unauthorized access. Reference: [Security Guidance v5, Domain 8 - Secrets Management]