Azure doesn't provide outbound IP addresses for websites, so it's not possible to restrict access to a website by an IP address that is specifically reserved for a particular website within your azure ecosystem.
Is there another way to make a website/web app only available to resources within it's resource group such that it's not available publicly?