Need help in Azure API management

Sajeda Sultana 25 Reputation points
2023-12-26T09:04:20.4766667+00:00

Hi All, 

I have a simple Json file contains names & emails. I want to access this file using APIM. Primarily want to access data, create new data & update the data through Postman. 

Please help to solve the problem. Any help is appreciated.

Thank you.

Azure API Management
Azure API Management
An Azure service that provides a hybrid, multi-cloud management platform for APIs.
2,462 questions
{count} votes

1 answer

Sort by: Most helpful
  1. Ben Gimblett 4,560 Reputation points Microsoft Employee
    2023-12-27T09:47:56.92+00:00

    Hi @Sajeda Sultana thanks for the question. Indeed as Pinaki suggests API management is principally a gateway (reverse proxy) for downstream APIs - it allows you to add functionality via policy and manage it in one place rather than provide the same for each API. You can also use API management to modernise legacy API's by using it as a façade to provide a new interface to an existing API.

    In theory you could expose your JSON by uploading it to an Azure storage account container and using an APIM send-request policy to read the content via the storage http rest API and send it back to the caller.
    There's a blog post here which is similar and can act as a rough guide, although it's persisting data rather than reading it, the principal is the same. https://techcommunity.microsoft.com/t5/azure-developer-community-blog/how-to-send-requests-to-azure-storage-from-azure-api-management/ba-p/3624955 you could amend the instructions here so you send a read request for the data rather than write.

    Take care to ensure that both the call to storage is secure (in the blog post they use managed identity of the APIM against storage) with least privilege (in your case read permission).

    In addition you will want to ensure callers into API Management are also authorized - because I expect you dont want just anyone to access your data. Options here include using oauth (for Azure this would be b2c or entra , or entra + b2b) - oauth is recommended - as well as client certificate and basic auth.

    0 comments No comments

Your answer

Answers can be marked as Accepted Answers by the question author, which helps users to know the answer solved the author's problem.