Restrciting wild card domains on azure app service

Question

I was able to add wildcard domains and attach to out App service.

Now Our concern is , it allows any domains which ends with say '.oursize.com', at least the landing page of website.

Suppose, we asked customer A to use as.oursite.com, if they misspell and use ap.oursite.com, still they will be able to access this and try to login and end up having error.

So, Is there any way, we can add restriction for subdomain? at App service level to allow only some domains or at Traffic manager level or load balancer level?

Answer 1

I would think you could leverage a text pattern style management policy scoped to the traffic manager. I'm not well versed in management policies but hopefully the https://github.com/Azure/azure-policy repo provides some tips and tricks. Another option you could do is create tooling that uses the management REST API to create the resources for your customers. That way, you have complete control over the source metadata and how those resources get created.

• https://learn.microsoft.com/en-us/rest/api/trafficmanager/
• https://learn.microsoft.com/en-us/rest/api/appservice/