Restrict IPs from accessing azure static web app using FrontDoor

Question

Is it possible to restrict access to a azure static web app leveraging FrontDoor + WAF? We are developing our static web app at the moment and don't want just anyone to access our static web app just yet. So was thinking if FrontDoor + WAF could help to restrict access via IP selection...is this possible?

Answer 1

Hello @kdeman ,

It is possible to restrict IPs from accessing your Azure static web app using Web Application Firewall for Azure Front Door. An IP address–based access control rule is a custom WAF rule that lets you control access to your web applications. It does this by specifying a list of IP addresses or IP address ranges in Classless Inter-Domain Routing (CIDR) format.

By default, your web application is accessible from the Internet. If you want to limit access to clients from a list of known IP addresses or IP address ranges, you may create an IP matching rule that contains the list of IP addresses as matching values and sets operator to "Not" (negate is true) and the action to Block. After an IP restriction rule is applied, requests that originate from addresses outside this allowed list receive a 403 Forbidden response.

Please refer : https://learn.microsoft.com/en-us/azure/web-application-firewall/afds/waf-front-door-configure-ip-restriction

Kindly let us know if the above helps or you need further assistance on this issue.

----------------------------------------------------------------------------------------------------------------

Please "Accept the answer" if the information helped you. This will help us and others in the community as well.