Consider accepting a parameter for ClientIP in the script.  Then, just add a firewall for that IP.  See here for an example:
https://github.com/WindowsAzure/azure-sdk-tools-samples/blob/dev/solutions/web/New-AzureWebsitewithDB.ps1