How to Create a Static Website in Azure Accessible Only on Company VPN with Custom Domain

 It is possible to have a static website with a custom domain that is fully locked down to just a company's VPN in Azure.

Here are the steps you can follow:

1. Create a storage account and enable static website hosting.

2. Upload your static website content to the $web container in the storage account.

3. Create a private endpoint for the storage account.

4. Configure the private endpoint to allow traffic only from the company's VPN.

5. Create a custom domain and add a CNAME record pointing to the Azure CDN endpoint.

6. Create a CDN profile and a CDN endpoint.

7. Configure the CDN endpoint to use the storage account as the origin.

8. Configure the CDN endpoint to use HTTPS and a custom domain.

9. Lock down the CDN endpoint to allow traffic only from the company's VPN.

By following these steps, you can have a static website with a custom domain that is fully locked down to just a company's VPN in Azure. The CDN endpoint will serve the static website content from the storage account, and access to the CDN endpoint will be restricted to only the company's VPN.