SOLVED

API Management monitoring

%3CLINGO-SUB%20id%3D%22lingo-sub-2322686%22%20slang%3D%22en-US%22%3EAPI%20Management%20monitoring%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-2322686%22%20slang%3D%22en-US%22%3E%3CP%3EI'm%20curious%2C%20can%20anyone%20tell%20me%20why%20the%20none%20of%20these%20best%20practices%20for%20monitoring%20the%20API%20gateway%20are%20included%20in%20ASC%3F%26nbsp%3B%3CA%20href%3D%22https%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fsecurity%2Fbenchmark%2Fazure%2Fbaselines%2Fapi-management-security-baseline%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%22%3Ehttps%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fsecurity%2Fbenchmark%2Fazure%2Fbaselines%2Fapi-management-security-baseline%3C%2FA%3E%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-LABS%20id%3D%22lingo-labs-2322686%22%20slang%3D%22en-US%22%3E%3CLINGO-LABEL%3Eapi%20gateway%3C%2FLINGO-LABEL%3E%3C%2FLINGO-LABS%3E%3CLINGO-SUB%20id%3D%22lingo-sub-2341370%22%20slang%3D%22en-US%22%3ERe%3A%20API%20Management%20monitoring%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-2341370%22%20slang%3D%22en-US%22%3EASC%20does%20not%20currently%20cover%20the%20API%20management%20service.%20You%20can%20find%20a%20list%20of%20all%20supported%20services%20here%3A%20%3CA%20href%3D%22https%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fazure%2Fsecurity-center%2Ffeatures-paas%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%22%3Ehttps%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fazure%2Fsecurity-center%2Ffeatures-paas%3C%2FA%3E%20%3CBR%20%2F%3EThank%20you%20for%20your%20question.%3C%2FLINGO-BODY%3E
Respected Contributor

I'm curious, can anyone tell me why the none of these best practices for monitoring the API gateway are included in ASC? https://docs.microsoft.com/en-us/security/benchmark/azure/baselines/api-management-security-baseline

5 Replies
ASC does not currently cover the API management service. You can find a list of all supported services here: https://docs.microsoft.com/en-us/azure/security-center/features-paas
Thank you for your question.
I realize that it does not, my question is why not?
best response confirmed by Dean Gross (Respected Contributor)
Solution
It is in the backlog. No ETA though.
Could you provide any information about what type of functionality is expected? Had a client asking about this last week.
Unfortunately we can't at the moment.