integrate application gateway ingress controller with api management

Somiya 231 Reputation points
2022-08-16T02:07:06.27+00:00

Hi,

In my current setup I am using aks with AGIC and I want to limit the request to the api's and also implement security, request and response handling. How to integrate magic with API Management ?

Azure API Management
Azure API Management
An Azure service that provides a hybrid, multi-cloud management platform for APIs.
1,159 questions
Azure Application Gateway
Azure Application Gateway
An Azure service that provides a platform-managed, scalable, and highly available application delivery controller as a service.
612 questions
No comments
1 vote

1 answer

Sort by: Most helpful
  1. JananiRamesh-MSFT 9,391 Reputation points
    2022-08-16T18:09:47.44+00:00

    Hi @Somiya Thanks for reaching out. From the description I believe the actual flow is client -> App Gateway -> APIM -> Backend please correct me if I am wrong here.
    in order to limit the request to the API's you can implement Rate limit and quotas policies for more information please refer: https://learn.microsoft.com/en-us/azure/api-management/api-management-access-restriction-policies

    Our data plane security model provides other methods to protect the downstream traffic to APIM and you can use any of them to enforce more restriction, below is a diagram that lists the all the methods we provide:

    231648-image.png

    you can implement any of the above methods in conjunction with the subscription Key to improve the security and enforce more restriction's

    https://learn.microsoft.com/en-us/azure/api-management/api-management-sample-send-request#making-the-validation-request
    https://learn.microsoft.com/en-us/azure/api-management/api-management-access-restriction-policies#SetUsageQuota

    Kindly let me know incase of further queries, I would you happy to assist you.

    Please 'Accept as answer' and ‘Upvote’ if it helped so that it can help others in the community looking for help on similar topics.