For hosting a static website on Azure Storage Account with custom domain, you are required to use Azure CDN/Azure Front Door service, but there are limited options to protect your origin from bypassing CDN/WAF. Microsoft recently introduced a killer feature, which enables high-level protection of any origin including Storage Account, AppService or even some service running on VMs. Celý příspěvek Make Azure Front Door Origin Secured with Private Link