CODEWITHSUNDEEP
c#azureazure-functionsblazor
user20063348
user20063348

Reputation:

How to limit access to Azure Function App to a website and clients only

I have an API running on a Function App in Azure.

I want this API to only accept communications from two parties:

  1. A blazor website
  2. All copies of a piece of packaged software (a WPF application which will run on customer computers)

I want all other traffic to be rejected.

What is the best way to configure this networking scenario?

The ideal setup:

Diagram of the setup

API should only be able to talk to the Blazor App as well as the client programs, not outside connections. The API can talk to the database which lays behind a virtual network. This Database VNET is already set up.

Any help is appreciated.

Upvotes: 0

Views: 298

Answers (1)

Thiago Custodio
Thiago Custodio

Reputation: 18387

Use API Management in front of the API and require Ocp-Apim-Subscription-Key in the requests.

Also, add ip restrictions to avoid unauthorized access

Upvotes: 0

Related Questions