Secure your APIs with Azure Application Gateway and Azure API Management

Comments · 11

• MA

  @ManaYoutube-20 · 5 years ago

  Hello, Thanks for sharing the knowledge<br><br> Is it possible to make a video on Azure AppGateway??<br><br>If we create a service then we will have the service URL, Lets say if we have the swagger link for that service then anyone can access, so for the customer faced URL&apos;s we can secure that service URL using the app gateway right and also if we want to pass the customerId parameterid in the query param then its not a good idea so we can send it using the JWT token..<br><br>1) Create a Web api endpoint with asp net core which also have the customer info properties needs to pass in the querystring/body.<br>2) secure the service URL with app gateway which have the subscripion key so that only the services which want to consume needs to pass that subscription key<br>3) instead of passing the important customer details in the header/queryparams we can send it using JWT.

• FA

  @fabribertani · 4 years ago

  <a href="https://www.youtube.com/watch?v=5QpSIMzb7eY">0:00</a> - Introduction<br><a href="https://www.youtube.com/watch?v=5QpSIMzb7eY&amp;t=75">1:15</a> - Agenda<br><a href="https://www.youtube.com/watch?v=5QpSIMzb7eY&amp;t=94">1:34</a> - Overview of the services<br><a href="https://www.youtube.com/watch?v=5QpSIMzb7eY&amp;t=366">6:06</a> - Problem Statement<br><a href="https://www.youtube.com/watch?v=5QpSIMzb7eY&amp;t=420">7:00</a> - Step 1<br><a href="https://www.youtube.com/watch?v=5QpSIMzb7eY&amp;t=643">10:43</a> - Step 2<br><a href="https://www.youtube.com/watch?v=5QpSIMzb7eY&amp;t=759">12:39</a> - Step 3<br><a href="https://www.youtube.com/watch?v=5QpSIMzb7eY&amp;t=825">13:45</a> - Step 4<br><a href="https://www.youtube.com/watch?v=5QpSIMzb7eY&amp;t=972">16:12</a> - Reference Architecture<br><a href="https://www.youtube.com/watch?v=5QpSIMzb7eY&amp;t=1060">17:40</a> - Demo

  3

• JI

  @jianguo8233 · 4 years ago

  Great video. A quick question, should the Non-Peered VNET access the APIM using Private Endpoint directly rather than the VMSS Port-Forwarding?

• YE

  @yesubabu2880 · 4 years ago

  if there is a change in the scripts, do we have to re-create the entire API again? how do we handle updates with scripts?

• OM

  @omaramer9418 · 3 years ago

  This is great. I am trying to setup APIM following this. Question around certificates and internal mode. I can&apos;t seem to figure out how many certificates I would need without using a wildcard (APP Gateway, Management Portal, Developer Portal, and Gateway? so 4? if you could elaborate more on the certificate piece, that would be great.

• FA

  @fabinhomac2006 · 3 years ago

  Hi, How you setup the probes on Application Gateway?

• MA

  @manishkumarsingh9677 · 4 years ago

  Really a PROD CASE you have explained here... Nice one..

  1

• OU

  @OurCloudSchool · 4 years ago

  is it possible to share script to create certificates ?

  2

• AL

  @alienzooband · 3 years ago

  very good

  1

• AP

  @appmobilie7121 · 3 years ago

  useless