Azure network assistance

Hi, I need help creating a route from a Web App service that is associated to a vnet, and then creating network limits to a storage file share. At the moment when I limit the file share to the vnet the web app cannot connect to the fileshare. I will also require a similar route from the web app service to a certificate store (and enable vnet only access to this service). Happy to do this via remote screen share. Thank you