Enterprise security feature: Azure Front Door w/ Networking Restriction & Private Link to DB

When you use a full App Service, you can put a Front Door in front of the app service, and then lock down the app service to only receive requests from the Front Door host via service tags. Additionally, you can create a private link from your API to your database inside of a VNET.

This basic functionality with the addition of the Data API will be essential for Enterprise customers.

**Describe alternatives you've considered**
The only alternative is to build this all out with traditional resources manually.

**Additional context**
This is _sort of_ already available where you can lock down access to a specific Front Door host with headers. Unfortunately, this still leaves the app open on the database side.