App Service: Block all the traffic to app service and allow traffic from frontdoor, This will block the direct access app service default URL / public IP
Azure Front door: Allow admin URL traffic from specific IP address/ranges, Block traffic for URL contain admin