Identify an API Request from a specific VNET and SUBNET

Question

We have multiple APIs accessed via APIM from different sources and we would like to allow one particular API only if the request is coming from a specific VNET and SUBNET. Is there a policy or a header or a service tag that we can rely on to achieve this? Again, only for 1 API we would like to have this verification or rule. Thanks!!!

Answer 1

Hi @Manikanth Ramagani Thanks for reaching out. From the description I understand that you have multiple API's but a single API needs to be accessed only if the request comes from a specific subnet/vnet this can be achieved using IP filter policy in Inbound at API scope.

IP filter will allow only the request comes from authorized IP, otherwise the request will be rejected.

please refer this document for sample policy and let me know incase of further queries, I would be happy to assist you.

API Management allows you to define policies at the various scopes please refer this document for more information

To benefit the community find the right answers, please do mark the post which was helpful by clicking on ‘Accept Answer’ & ‘Up-Vote’.