Azure api management and Web App

I have hosted my REST services on API management and consuming those in the Azure Web app service which consists of only HTML pages, javascript files and CSS files.

I would like to know how to restrict accessing the REST endpoints of the API management only from the web app without Azure AD and OAuth setup.