make azure website only available to other azure websites

Question

I currently have deployed a WCF service along with 3 different asp.net mvc applications that consume the WCF service, all of the applications have been deployed to a different azure web site. As the WCF application has direct access to the databases of my system I would like to make it so only the other websites with the asp.net mvc applications have access to it, is this possible? I tried with ip white listing but I haven't found the websites local ips in order to add the rules and adding the urls of the websites along with enabling DNS reverse lookup does not work either.

Thanks in advance

Answer 1

Wouldn't there be risk of this ip changing without me being notified?

Start from last year, you can get static IP Address in Azure.

How to get a static IP address for your Microsoft Azure Web Site.

In addition to restricting by IP address, you might also want one more layer of security such as including a token via HTTPS.

Answer 2

Instead of relying on a certain hosting environment (which may be subject to future changes), you'll better use an approach with a hard-coded access key, which, in your scenario, can be as simple as handing over a well-known GUID to the service.