Error when creating AAD Identity Provider for APIM

Question

Hello,

I have a DEV instance of API Management running in Azure. It was working for quite some time. Today, I wanted to delete the whole environment and recreate it from scratch using Terraform. All seems okay until it tries to create an azurerm_api_management_identity_provider_aad resource. I got the error below:

Could not create identity provider

Call to Management API {name}.management.azure-api.net:3443 timed out for the Developer SKU service which will have inherent capacity issues due to it's scale. Please refer to SLA at https://aka.ms/apimsla and considering upgrading to a SKU Tier with higher SLA.

I tried doing this manually via Portal but got the same error. I understand the suggestion to upgrade the tier. I just don't know why. For development purposes, this was good enough.

Is there a way to create this thing manually without upgrading? What does that error mean at all? I don't see any relation with SLAs here.

Answer 1

Michal Pipal Quickly checking the correlation ID, I found that the service is Basic SKU, and the request was timed out. There is a known issue with Developer SKUs as well as Basic SKUs where you may see a timeout when creating API Management services or performing any service updates such as adding custom domain, adding VNET etc. (impacted all regions).

Our product team is currently deploying a fix and ETA for the resolution is 10/20 (subject to change on other factors). Will keep you posted. Unfortunately, there is no workaround and retry may be successful. Sorry for the inconvenience caused by this issue.

I hope this helps and let me know if any questions.