App Service has added Azure Portal support for configuring networking options regarding virtual networks and private endpoints. This capability (currently in public preview) allows you to use the Portal to ensure a secure configuration from the moment you create a new web app in App Service.
This capability is also available through the Azure CLI and ARM templates.
Learn more about virtual networks.
Learn more about private endpoints.