A variation/extension of this Architecture showing Zone Redundancy & DevOps deployment is shown below.
One method for reporting is to allow connectivity from PowerBI cia a VNet data gataway. Unlike with an On Premises Gateway you do not have to deploy any hardware - the setup does it for you.
The instructions to set this up is here.