Route Private Azure Static Site
Budget: ₹600 – ₹1,500 INR
I already host my static website in an Azure Storage Account configured for static web hosting, but the storage account is locked down behind private network rules. I need a straightforward, working path that lets public users reach the site while traffic flows through two Azure layers:
1. Azure Application Gateway (for load-balancing and Web Application Firewall security)
2. Azure API Management (for an additional security gateway and future API routing)
Here is what I’m after:
• Build a clear, minimal configuration—either in the Azure portal or in well-commented ARM/Bicep/Terraform files—that connects the public endpoint of Application Gateway to APIM, and finally to the private static website endpoint.
• Import my existing SSL certificate so the custom domain (I will supply it) terminates over HTTPS at Application Gateway.
• Produce a short hand-over note that shows: DNS records I must create, which listener/routing rules were added, and how to update or renew the certificate in the future.
• Confirm that the site loads publicly with no direct exposure of the storage account.
I have the resource group and storage setup in place; you just need to wire up the networking and provide the basic blueprint so I can replicate it in other environments later.
1. Azure Application Gateway (for load-balancing and Web Application Firewall security)
2. Azure API Management (for an additional security gateway and future API routing)
Here is what I’m after:
• Build a clear, minimal configuration—either in the Azure portal or in well-commented ARM/Bicep/Terraform files—that connects the public endpoint of Application Gateway to APIM, and finally to the private static website endpoint.
• Import my existing SSL certificate so the custom domain (I will supply it) terminates over HTTPS at Application Gateway.
• Produce a short hand-over note that shows: DNS records I must create, which listener/routing rules were added, and how to update or renew the certificate in the future.
• Confirm that the site loads publicly with no direct exposure of the storage account.
I have the resource group and storage setup in place; you just need to wire up the networking and provide the basic blueprint so I can replicate it in other environments later.