Tutorial: Create and publish a product
APPLIES TO: All API Management tiers
In Azure API Management, a product contains one or more APIs, a usage quota, and the terms of use. After a product is published, developers can subscribe to the product and begin to use the product's APIs.
In this tutorial, you learn how to:
- Create and publish a product
- Add an API to the product
- Access product APIs
Prerequisites
- Learn the Azure API Management terminology.
- Complete the following quickstart: Create an Azure API Management instance.
- Also, complete the following tutorial: Import and publish your first API.
Create and publish a product
Sign in to the Azure portal, and navigate to your API Management instance.
In the left navigation pane, select Products > + Add.
In the Add product window, enter values described in the following table to create your product.
Name Description Display name The name as you want it to be shown in the developer portal. Description Provide information about the product such as its purpose, the APIs it provides access to, and other details. State Select Published if you want to publish the product. Before the APIs in a product can be called, the product must be published. By default, new products are unpublished, and are visible only to the Administrators group. Requires subscription Select if a user is required to subscribe to use the product (the product is protected) and a subscription key must be used to access the product's APIs. If a subscription isn't required (the product is open), a subscription key isn't required to access the product's APIs. See Access to product APIs later in this article. Requires approval Select if you want an administrator to review and accept or reject subscription attempts to this product. If not selected, subscription attempts are auto-approved. Subscription count limit Optionally limit the count of multiple simultaneous subscriptions. Legal terms You can include the terms of use for the product which subscribers must accept in order to use the product. APIs Select one or more APIs. You can also add APIs after creating the product. For more information, see Add APIs to a product later in this article.
If the product is open (doesn't require a subscription), you can only add an API that isn't associated with another open product.Select Create to create your new product.
Caution
Use care when configuring a product that doesn't require a subscription. This configuration may be overly permissive and may make the product's APIs more vulnerable to certain API security threats.
Add more configurations
Continue configuring the product after saving it. In your API Management instance, select the product from the Products window. Add or update:
Item | Description |
---|---|
Settings | Product metadata and state |
APIs | APIs associated with the product |
Policies | Policies applied to product APIs |
Access control | Product visibility for developers or guests |
Subscriptions | Product subscribers |
Add APIs to a product
Products are associations of one or more APIs. You can include many APIs and offer them to developers through the developer portal. During the product creation, you can add one or more existing APIs. You can also add APIs to the product later, either from the Products Settings page or while creating an API.
Add an API to an existing product
- In the left navigation of your API Management instance, select Products.
- Select a product, and then select APIs.
- Select + Add API.
- Select one or more APIs, and then Select.
Access to product APIs
After you publish a product, developers can access the APIs. Depending on how the product is configured, they may need to subscribe to the product for access.
Protected product - Developers must first subscribe to a protected product to get access to the product's APIs. When they subscribe, they get a subscription key that can access any API in that product. If you created the API Management instance, you are an administrator already, so you are subscribed to every product by default. For more information, see Subscriptions in Azure API Management.
When a client makes an API request with a valid product subscription key, API Management processes the request and permits access in the context of the product. Policies and access control rules configured for the product can be applied.
Tip
You can create or update a user's subscription to a product with custom subscription keys through a REST API or PowerShell command.
Open product - Developers can access an open product's APIs without a subscription key. However, you can configure other mechanisms to secure client access to the APIs, including OAuth 2.0, client certificates, and restricting caller IP addresses.
Note
Open products aren't listed in the developer portal for developers to learn about or subscribe to. They're visible only to the Administrators group. You'll need to use another mechanism to inform developers about APIs that can be accessed without a subscription key.
When a client makes an API request without a subscription key:
API Management checks whether the API is associated with an open product. An API can be associated with at most one open product.
If the open product exists, it then processes the request in the context of that open product. Policies and access control rules configured for the open product can be applied.
For more information, see How API Management handles requests with or without subscription keys.
Next steps
In this tutorial, you learned how to:
- Create and publish a product
- Add an API to the product
- Access product APIs
Advance to the next tutorial: