Access 2013 with Azure SQL - Dynamic IP

I have created a simple Access 2013 database that is linked via ODBC to an Azure SQL server. Due to the limitations of Azure SQL (must declare IP addresses) and the security risks involved of opening the IP range to encompass all IP's, what is the simplest way to have the Access database talk to the Azure SQL server with unknown IP addresses without opening up all the IP's? I would like to keep this all in Azure if possible.

Is there a way to create a simple web layer in which the Access database will speak to, thus I only need to open the IP address for the web layer? If so, will I need to change how the Access database functions? There are some SQL functions that change the database directly when users change/add information...

I have done a little research and it appears I must host my own web layer, but how could I set it up in Azure to work with the existing Access database?