Search code examples
azureazure-active-directoryazure-web-app-serviceazure-storage

How can I restrict the access to my website (Azure Static Website) to the people in my Active Directory?


I came across the following service in Azure, called Azure Static Website, which allows me to store a static website in my storage account.

It works and I am able to use it.

However, I would like to restrict the access of the website (not the resources, but the actual website) to the people that are in my Azure Active Directory.

In the website's configuration, I do not see anything to enable this:

Access policy of the website

Question

Is it possible to restrict the access to my Azure Static Website to the people in my Active Directory?


Solution

  • I'm able to understand that there could be two possibilities you are referring to:

    1- Limit access to the website to specific users

    2- Limit access to website resources(content stored in $web container) to specific users.

    For option 1: Anyone that knows the URI to your website will be able to access it, there are no option to restrict the access based on RBAC.

    Option 2: You can control who can access the resources stored on the $web container via SAS, Rbac(AD) or Keys, more on can be read on this documentation