API Management | Your Azure Coach

Azure trainings!
Infused with experience from the field, brought with lots of passion!

Azure API Management policy expressions cheat-sheet!

Sep 15, 2020 | API Management

The problem When authoring Azure API Management policies, I often ask myself “How can I get the value of an HTTP header, without throwing null reference exception if it does not exist?” or “What’s the best way to verify an incoming client...

Use Azure Policy to enforce HTTPS in Azure API Management

Sep 1, 2020 | API Management

Modern API security protocols, like OAuth2 and Open ID Connect, assume that all HTTP traffic is encrypted on the wire, using TLS. Therefor, it is a good security practice to enforce the usage of HTTPS within API Management. In Azure, the Azure Policy engine is...

Removing backend stack traces in Azure API Management: a caveat!

Aug 25, 2020 | API Management

On my latest project, I developed a global policy to ensure that no stack traces get returned to the API consumer. This is a good security measure, because stack traces reveal too much information about the underlying technology and setup. Inside the All APIs policy,...

Automatic backups for Azure API Management

Aug 19, 2020 | API Management

It’s a good practice to configure backups for your API Management instances in production. A disaster can always occur, so it’s better that you are prepared for that. Even when your API Management is completely deployed through automation, this advise...

Programmatically creating Azure API Management subscriptions

Aug 11, 2020 | API Management

In API Management, you can automate the creation of subscriptions and their corresponding subscription keys. There are several reasons why you would like to do this: Configuration as code: the access control to your APIs is managed and automated through automated...

Enforce API Management product subscriptions with Azure Policy

Aug 5, 2020 | API Management, Azure Policy

In a previous post, I explained why and how you could enforce the usage of product subscriptions within Azure API Management. As I was not entirely happy about the solution, I invested a little more time to check if Azure Policy could achieve the same result! And...

« Older Entries

Next Entries »