Forum Discussion
ChrisTrailight
Nov 25, 2024Copper Contributor
API Management service secure configuration for Standard v2 SKU
Hi all, I am transitioning an API Managment gateway from the Developer SKU to something Production ready. The Standard V2 SKU is the first tier that supports vnet integration which we require. Th...
balasubramanim
Nov 27, 2024Iron Contributor
To securely configure Azure API Management (APIM) in Standard v2 SKU, please try these steps
- Enable VNet Integration:
Set the APIM instance to "Internal" mode in the VNet to restrict API traffic to internal networks. - Restrict Management Access:
Use Azure AD for management authentication.
Limit access to endpoints via Network Security Groups (NSGs) and IP whitelisting. - Add a WAF/Firewall:
Deploy Azure Application Gateway with WAF or Azure Firewall to control and monitor traffic. - Follow Security Best Practices:
Apply OWASP guidelines: validate inputs, use rate limiting, and enforce strong authentication.
5: Consider Premium SKU:
For full private endpoint integration and enhanced security, upgrade to the Premium tier.
This setup secures your APIM while working within Standard v2 limitations