WebApps calling KeyVault for secrets

[JacksWastedLife]

Hi, 

I have a web app that needs to look up key/values in the key vault. 

I have assigned identity to the web app and set permissions on KeyVault, but do I still need to enable access on the key vault firewall for the outbound IP of the WebApp? Hard to manged if the WebApp is stopped as the IP will change? 

Is there a better way?

[#2]

@JacksWastedLife you need not to do anything with the IP address. Your current setup should be able to pull the key/secrets from the AKV.

Are you using any vNET ?