title: How to enable authentication for an ACI webservice in Azure Machine Learning service?
body: <p>I am able to deploy a Azure Machine learning prediction service in my workspace <code>ws</code> using the syntax</p>
  
  <pre><code>aciconfig = AciWebservice.deploy_configuration(cpu_cores=1, 
                                                 memory_gb=8, 
                                                 tags={"method" : "some method"}, 
                                                 description='Predict something')
  </code></pre>
  
  <p>and then</p>
  
  <pre><code>service = Webservice.deploy_from_image(deployment_config = aciconfig,
                                         image = image,
                                         name = service_name,
                                         workspace = ws)
  </code></pre>
  
  <p>as described in the <a href="https://docs.microsoft.com/en-us/azure/machine-learning/service/how-to-deploy-and-where#aci" rel="nofollow noreferrer">documentation</a>.<br>
  However, this exposes a service publicly and this is not really optimal.</p>
  
  <p>What's the easiest way to shield the ACI service? I understand that passing an <a href="https://docs.microsoft.com/en-us/python/api/azureml-core/azureml.core.webservice.aciwebservice?view=azure-ml-py#deploy-configuration-cpu-cores-none--memory-gb-none--tags-none--properties-none--description-none--location-none--auth-enabled-none--ssl-enabled-none--enable-app-insights-none--ssl-cert-pem-file-none--ssl-key-pem-file-none--ssl-cname-none-" rel="nofollow noreferrer"><code>auth_enabled=True</code></a> parameter may do the job, but then how can I instruct a client (say, using <code>curl</code> or Postman) to use the service afterwards? </p>