Customer wants to front load an API Management service with a Web Application Firewall (WAF). Application Gateway WAF SKU provides a Web Application Firewall which protects them against top 10 OWASP vulnerabilities. The APIM sits behind Application Gateway and only accessible via the Application Gateway. Application Gateway is a Reverse-Proxy…

Occasionally, your architecture may require that you find a way to disable port 80 in API Management service so that it does NOT respond at all to HTTP requests but only HTTPS requests. Currently you cannot disable that Http.Sys port 80 listener on the APIM VMs, however this guide will…

The developer portal supports programmatic access to content. It allows you to extract the data from or upload it to your API Management service through the content management REST API To simplify automation of this process, a script has been prepared for that purpose which is available here scripts.v2/migrate.js. It…

When you create an Azure API Management service instance, Azure assigns it a sub domain of *.azure-api.net (for example, <apim-service-name>.azure-api.net). However, you can expose your API Management endpoints using your own custom domain name, such as theoots.com. …