Azure API - secure SCM access, per IP or VNET

Question

Hello,

There are 3 VNET integration options: Off, Internal, External. But according to the documentation SCM (Source Code Management) is always exposed to the internet. Is there a way to restrict access to IP or VNET for SCM / GIT.

https://learn.microsoft.com/en-us/azure/api-management/api-management-using-with-vnet#enable-vnet-connectivity-using-the-azure-portal

Answer 1

@Anonymous SCM/Git is part of the APIM instance and the same network restrictions hold true for it as well. Only the Management Endpoint is exposed in both VNET options for ARM Actions to work.