Introduction to Azure API Management

in this lb session you'll learn about Azure API management and the networking options available Azure API management and Azure service that will help you to manage your API why do you need an API management well let's start from the beginning first of all an Enterprise would have some API those API would live on Prem or maybe they are also on another cloud provider they could be also on Azure so in Azure maybe you are using a solution like azure functions or app service container apps or maybe your API are created in an AKs cluster now you want to be able to securely Expose and manage those API in this case you might rely on an API Gateway with a Gateway solution and through that Gateway you can get access to those API and then you can expose those API to your end users you can expose it through a public or a private I i p and that will allow your users to be able to connect to that endpoint so the Gateway will provide you some nice features like handling the caching throttling the requests it will help you also to manage the security of your API you will be able to do some transformation where you can expose wisd web service through rest Json ABS service for example and then that will allow you also to do Mocking where you can define a mock that will return a sample HTTP request so you expose this API to your users through the Gateway but now maybe you want to offer those API to some external or some third party developers so that they could integrate it within their own applications and this way you can provide what we call a developer portal the developer portal will be used then in order to discover the API or the web services be able to test those web services to manage accounts because because here if you want to offer your API to third party developers then you want to to control how they use and they access your API so maybe you'll be giving them API tokens and then you want also to analyze the user and again for that developer portal it could be and it will be actually exposed through either a public or a private endpoint and that it will be exposed to the developers and now for the administrators to administer the Gateway and the developer portal and the airback roles they will need another feature here which is the management portal or also called it the management plane the management plane again will be exposed through a public or private IP address and it is meant to be used by the administrator all of these components and these features will be provided by the API Management in Azure that englobes the management plane the developer portal and the Gateway let's learn about the networking options for aure API management aure API management is typically used to expose your services or your endpoints through the Gateway and then you'll be able to allow your users to access those app services or those Services through that Gateway and that Gateway here we are mentioning that it could be exposed through a public or a private IP address let's see those options and how you can configure them within a another API management so when you create an API management we ask you if if you want to attach that API management to a virtal network or not let's start with the first option where here you go I or you choose to not attach it to a virtual network with that option that means that your API management will be exposed publicly to the internet through a P public IP address so this one here would have a public IP and it will also have a public fqdn that could be used by your your end users to access directly the Gateway and then we have a second option which is to attach the API management to Virtual Network this means that the API management will be injected into a nsal network so this means would have a private IP address within the virtal network that could be reached from services that are deployed within that virtal Network and here when we attach a virtal network or when we attach the upim to AAL Network we have actually two options either we choose the external external mode this means that with this mode we would have the private IP but we would also have a public IP address that exposes that API management our third option here would be an API management that is attached to Virtual network but instead of using the external mode it can use an internal mode an internal mode means that we would have here our API management that will be attached to a virtual Network the the APA management would have a private IP address within that v-net but it would have only a private IP address will not have that public IP and in this way this API management could be used by the services deployed within the same virtual Network or within a period virtual Network and still if you want to expose publicly your end points or your API here then you would be relying on services like the application Gateway that could be injected into the same vertial network and then could reach that private IP or you can also rely on other services like Azure front door that could use the private link service in order to be able to be injected within the same vertial network and then reach that private IP so those are the different options either not attached to vert network attached to vert network with the external mode or attached and with internal mode we still have actually a fourth option that is using a private endpoint with a private endpoint this means that you will still have your API management that is attached to a virtual Network and with this configuration instead of having just a private IP address your API management would have a private endpoint that private endpoint is attached or is injected into the virtual Network so then to be able to expose those Services privately you just connect to the private endpoint and if you want to expose them public public L then you still can rely on the same services like here the application Gateway and the Azure front door but here of course because you are using private endpoint you will be adding a DNS Zone to resolve the domain name of your private endpoint to the fqdn of the API management I hope this was helpful thank you

Channel: Houssem Dellai

Views: 3,003

Keywords: azure, api, apim, api management, rest api, security, internal

Id: Fr4Wv0KQaXk

Length: 6min 50sec (410 seconds)

Published: Mon Jan 15 2024