Forum Discussion
API Management service secure configuration for Standard v2 SKU
Hi all, I am transitioning an API Managment gateway from the Developer SKU to something Production ready. The Standard V2 SKU is the first tier that supports vnet integration which we require. Th...
Consider the following:
- Use Network Security Groups (NSGs): Apply NSGs to restrict access to your API Management instance. This can help control inbound and outbound traffic, ensuring only trusted sources can reach your endpoints.
- Private Endpoints: Although the Standard V2 SKU does not support private endpoints directly, you can use a combination of VNet integration and NSGs to limit exposure. Ensure your API backends are isolated within the VNet.
- Azure Application Gateway: Deploy an Azure Application Gateway in front of your API Management instance. This can provide an additional layer of security, including Web Application Firewall (WAF) capabilities to protect against common threats.
- Custom Policies: Implement custom policies within API Management to enforce security measures, such as IP filtering, rate limiting, and JWT validation.
- Azure Front Door: Consider using Azure Front Door to manage and secure traffic to your API Management instance. It offers global load balancing, SSL termination, and DDoS protection.