Authenticate to an EventGrid Topic with an MSI

Question

Authenticate to an EventGrid Topic with an MSI

Bell, Samuel 26

Hey team,

I would like to use an Azure API management identity to authenticate against an EventGrid Topic rather than using access keys. Is there a timeframe for when this will be supported?

MikeUrnun 9,777 Reputation points Moderator

2021-04-13T23:56:38.643+00:00

Hello @Bell, Samuel - APIM does support MSI: https://learn.microsoft.com/en-us/azure/api-management/api-management-howto-use-managed-service-identity

Were you referring to how API Management isn't an option when creating an event subscription to your EG topic?
Bell, Samuel 26 Reputation points

2021-04-14T00:08:04.523+00:00

No, I am referring to API management using its own system managed identity to generate a bearer token against Eventgrid to publish a message to an Eventgrid topic.

The above refers to an EventGrid subscription (outbound).

Accepted answer

1 additional answer

Your answer

MikeUrnun 9,777 Reputation points Moderator

2021-04-13T23:56:38.643+00:00

Hello @Bell, Samuel - APIM does support MSI: https://learn.microsoft.com/en-us/azure/api-management/api-management-howto-use-managed-service-identity

Were you referring to how API Management isn't an option when creating an event subscription to your EG topic?
Bell, Samuel 26 Reputation points

2021-04-14T00:08:04.523+00:00

No, I am referring to API management using its own system managed identity to generate a bearer token against Eventgrid to publish a message to an Eventgrid topic.

The above refers to an EventGrid subscription (outbound).

Answer 1

Hello @Bell, Samuel ,

I'm sorry I misread your question, and thank you for clarifying in the comments section. I inquired the Event Grid team internally for updates on this scenario, and they confirmed that this feature is in the works, targeting public preview for this coming summer (please note that any approximate timeframes we share on public channels are always subject to change). When it does become available, we will be publishing a sample here: https://github.com/Azure/api-management-policy-snippets/tree/master/examples

I hope this helps planning better for the projects you're working on!

Answer 2

devops mstephenson 1

just wondering if there was an update on this feature

Share via

Authenticate to an EventGrid Topic with an MSI

1 additional answer

Your answer