Matt Browne

Azure App Services are commonly used for hosting sites that are presented to anyone on the internet. How do we secure them, so that only internal staff can access them? This is where Azure Private Link comes in. Private Link works by giving your web app a private IP address on one of your internal VNets. This provides a route for inbound traffic (inbound to the app) from your VNet and any network that is routable from that VNet. However, this also isolates your app from the internet, so only traffic from the Private Link can get to it.