Advice needed to hide backend from public

Question

I have hosted a backend in Azure App Service, which includes a few APIs used within the backend application. One of these APIs is called by HTML pages hosted on a storage account. When the HTML pages call this API, it exposes the backend URL, which I want to hide from the public. Is it possible to wrap this specific API with a different IP or domain name, so that it becomes inaccessible to the public and is accessible only through a specific IP or domain name?

backenddomain.com/ << backend home
backenddomain.com/apis/adminApi1 << backend apis
backenddomain.com/apis/adminApi2 << backend apis
backenddomain.com/apis/adminApi3 << backend apis
backenddomain.com/apis/userApi1 << hide it become something like, someotherip.com/apis/userApi1

someotherip.com/ << not accessible by public
someotherip.com/apis/adminApi1 << not accessible by public

Answer 1

Hello @My2ndLovE

Your problem could be solved by using a combination of Azure services like Azure API Management and Azure Front Door or Azure Application Gateway.

Azure Static Web Apps’ backend integration works by reverse proxying calls made to /api to the linked Azure resource Web App or an API Management instance. When it proxies these calls, it also injects the HTTP headers necessary for authentication and authorization, such as the x-ms-client-principal.

 

By doing this, the Azure Static Web Apps backend integration feature enables the aforementioned benefits of seamless routing and integrated security. By serving your API from the /api endpoint, no additional CORS configurations are needed for your backend. Additionally, by injecting the required headers, you can access your user credentials if you are using Azure Static Web Apps’ authentication and authorization.

With Azure Front Door or Azure Application Gateway you can configure custom domains and provide routing

Here are examples

https://techcommunity.microsoft.com/t5/apps-on-azure-blog/integrating-network-isolated-backends-with-azure-static-web-apps/ba-p/3721136