Implementing Firewall for function apps with inbound HTTPS traffic

Typically you want to use WAF for that scenario. If using AzFW Premium, the main problem you will found is that with TLS insection it will replace the public cert of AzFunctions with a self-signed one. If not using TLS inspection, the AzFW offers little added value from a security perspective IMHO.