I want to restrict access to my

Create an access restriction rule to deny from the internet.

Next create a second acccess rule to allow access from the APIM. Ensure the priority on this one is higher.

Read the Microsoft Docs on how to set app service IP restrictions here : https://docs.microsoft.com/en-us/azure/app-service/app-service-ip-restrictions

CodePudding user response：

For Azure Container Instances, you don't have the option to configure IP restrictions similar to Azure App Services. Instead you will have to first create a virtual network and configure a Network Security Group to Deny all traffic from the internet and allow only from APIM, and then deploy your Azure Container Instance to this virtual network.

See here for deploying an azure container instance to a virtual network : https://docs.microsoft.com/en-us/azure/container-instances/container-instances-vnet

For configuring network security groups in your virtual network see : https://docs.microsoft.com/en-us/azure/virtual-network/manage-network-security-group#work-with-security-rules