Enable Authorization to the Azure Static Websites using Azure Active Directory
Right now, there is development done to use Blob storage for a static website (known as Azure Static Websites). The feature is in preview.
However, the downside of this is that the website is public. There is no built-in to restrict the access to the website.
In my use case, I would have used Azure Static Websites to store the static documentation produced by DocFx (https://dotnet.github.io/docfx/). This documentation includes the classes as well including technical documentation and wikis.
I would be great if I could use my Azure Active Directory to control who can actually see the pages since there is sensitive information in there.
Its worse that that:
The documentation is terrible so people don't realise :
No Origin certs
No Security headers
Firewall is only IPV4, no vnet - multiple exposed endpoints
Its a joke and misleading. Should be removed. It shouldnt be used to host sites
I assumed this would be the case as blob storage already had access policy control in the portal. This seems like a step back.