Deploying Azure API Management in an Internal mode (inside VNet)

Background: Recently I helped a customer deploying Azure API Management in an Internal Mode (inside Virtual Network, not accessible from internet). This brings in several challenges, some of it doc...