How to retrieve the Azure API Management Developer Portal URL via REST Management API

Great! Thanks very much.

Do you know if there is a way to get at this directly in APIM Policy code (without a side-car request)? BingAI / ChatGPT were a complete failure here.... :)

@Jason Williams There are two approaches to do this in the policy code itself.

1. Since the Developer Portal URL wouldn't really change unless you add a custom domain to it, you could save the value in a Named Value and use it within your policy code
2. If you would want to make these requests, you could use the send-request policy to do so.

I was able to dynamically retrieve the Developer Portal URL, but when using the managed identity it was returning a 403. Supposedly it only needed Reader role, but wasn't working. Putting the code here in case someone else wanted to try it. Note - I realise that Resource group hasn't been dynamically set:

<authentication-managed-identity resource="https://management.azure.com/" output-token-variable-name="systemToken" ignore-error="true" />
	<send-request ignore-error="true" timeout="20" response-variable-name="apimServiceConfigResult" mode="new">
		<set-url>@("https://management.azure.com/subscriptions/" + context.Subscription.Id + "/resourceGroups/xxxxxxxx/providers/Microsoft.ApiManagement/service/" + context.Deployment.ServiceName + "?api-version=2022-08-01")</set-url>
		<set-method>GET</set-method>
		<set-header name="Authorization" exists-action="override">
			<value>@("Bearer " + (string)context.Variables["systemToken"])</value>
		</set-header>
	</send-request>
	<set-variable name="apimServiceConfigResultStatusCode" value="@(((IResponse)context.Variables["apimServiceConfigResult"]).StatusCode)" />
	<choose>
		<when condition="@((((int)((IResponse)context.Variables["apimServiceConfigResult"]).StatusCode) > 299))">
			<set-variable name="developerPortalURL" value="Not Available" />
		</when>
		<when condition="@(context.Variables.ContainsKey("apimServiceConfigResult"))">
			<set-variable name="apimServiceConfig" value="@(((IResponse)context.Variables["apimServiceConfigResult"]).Body.As<JObject>())" />
			<set-variable name="developerPortalURL" value="@((string)((JObject)context.Variables["apimServiceConfig"])["properties"]["developerPortalUrl"])" />
		</when>
	</choose>

Apparently I've see that you can actually move the authentication-managed-identity into the send-request to avoid having to pass a variable and set the header manually. eg.

	<send-request ignore-error="true" timeout="20" response-variable-name="apimServiceConfigResult" mode="new">
		<set-url>@("https://management.azure.com/subscriptions/" + context.Subscription.Id + "/resourceGroups/xxxxxxxx/providers/Microsoft.ApiManagement/service/" + context.Deployment.ServiceName + "?api-version=2022-08-01")</set-url>
		<set-method>GET</set-method>
		<authentication-managed-identity resource="https://management.azure.com/" />
</send-request>