How to restrict the public access for Azure Static Web Apps deployment URLs?

Question

How to restrict the public access for Azure Static Web Apps deployment URLs?

Anonymous

Hi,

Is it possible to restrict the public access for Azure Static Web Apps deployment URLs and we need access for only internal network in inside the company.

Anonymous

2025-09-23T02:50:12.2733333+00:00
Hi Ashok Vaddevalli

Thank you for posting your question on the Microsoft Q&A forum.

Currently, Azure Static Web Apps (SWA) do not support Private Endpoints or VNet integration, so you won’t find an option to directly restrict access at the network level. The deployment URL is always internet-accessible.

If you need to restrict access to only your internal users, here are some approaches you can consider:

Authentication and Authorization

Use the built-in Azure Active Directory (Azure AD) authentication in Static Web Apps.

With this approach, even though the URL is public, only authenticated company users will be able to access the app.

Authentication and authorization in Azure Static Web Apps

Front Door or Application Gateway

Place Azure Front Door or Application Gateway in front of your Static Web App.

You can then configure access restrictions (for example, IP filtering or WAF rules) at that layer.

What is Azure Front Door?

Alternative Hosting (if strict private access is required)

If your scenario requires full private access via Private Endpoints, consider hosting static content using Azure App Service, since it supports VNet integration and Private Endpoints.

Restrict access to Azure Web Apps

Hope this helps!
Anonymous

2025-09-24T08:46:53.03+00:00

Hi Ashok Vaddevalli

Just checking in to see if above information was helpful. If you have any further updates on this issue, please feel free to post back.
Tom Burgess 31 Reputation points

2025-11-19T15:51:29.5033333+00:00

This is contradictory to this document - https://learn.microsoft.com/en-us/azure/static-web-apps/private-endpoint

Your answer

Anonymous

2025-09-23T02:50:12.2733333+00:00

Hi Ashok Vaddevalli

Thank you for posting your question on the Microsoft Q&A forum.

Currently, Azure Static Web Apps (SWA) do not support Private Endpoints or VNet integration, so you won’t find an option to directly restrict access at the network level. The deployment URL is always internet-accessible.

If you need to restrict access to only your internal users, here are some approaches you can consider:

Authentication and Authorization

Use the built-in Azure Active Directory (Azure AD) authentication in Static Web Apps.

With this approach, even though the URL is public, only authenticated company users will be able to access the app.

Authentication and authorization in Azure Static Web Apps

Front Door or Application Gateway

Place Azure Front Door or Application Gateway in front of your Static Web App.

You can then configure access restrictions (for example, IP filtering or WAF rules) at that layer.

What is Azure Front Door?

Alternative Hosting (if strict private access is required)

If your scenario requires full private access via Private Endpoints, consider hosting static content using Azure App Service, since it supports VNet integration and Private Endpoints.

Restrict access to Azure Web Apps

Hope this helps!
Anonymous

2025-09-24T08:46:53.03+00:00

Hi Ashok Vaddevalli

Just checking in to see if above information was helpful. If you have any further updates on this issue, please feel free to post back.
Tom Burgess 31 Reputation points

2025-11-19T15:51:29.5033333+00:00

This is contradictory to this document - https://learn.microsoft.com/en-us/azure/static-web-apps/private-endpoint