You can now configure Application Gateway resources as Private Link enabled origins in your Front Door Premium profile. Private Link enabled origins in Front Door allow you
to deliver content to your end-users through public Front Door endpoints while
ensuring that your origins remain inaccessible to the public internet.