Azure - Allow Web App to access KeyVault with Firewall

The simplest approach would be to add your Web App’s list of “Outbound IPs” (found in the properties section of your web app’s blade) to the Key Vault’s firewall.