Secure API’s with API Management and Application Gateway

Eray ALTILI
10 min readApr 22, 2022
Securing API’s with API Management and App Gateway
Overview Of API Management

Azure API Management is a hybrid, multicloud management platform for APIs across all environments.

Azure API Management is made up of an API gateway, a management plane, and a developer portal. These components are Azure-hosted and fully managed by default.

Management plane

API providers interact with the service through the management plane, which provides full access to the API Management service capabilities.

Use the management plane to:

•Provision and configure API Management service settings

•Define or import API schemas from a wide range of sources, including OpenAPI specifications, Azure compute services, or WebSocket or GraphQL backends

•Package APIs into products

•Set up policies like quotas or transformations on the APIs

•Get insights from analytics

•Manage users

Developer portal

The open-source developer portal is an automatically generated, fully customizable website with the documentation of your APIs.

API providers can customize the look and feel of the developer portal by adding custom content, customizing styles, and adding their branding. Extend the developer portal further by self-hosting.

App developers use the open-source developer portal to discover the APIs, onboard to use them, and learn how to consume them in applications. (APIs can also be exported to the Power Platform for discovery and use by citizen developers.)

Using the developer portal, developers can:

•Read API documentation

•Call an API via the interactive console

•Create an account and subscribe to get API keys

•Access analytics on their own usage

•Download API definitions

•Manage API keys

API gateway

--

--

Eray ALTILI

I am passionate about Technology, Cloud Computing, Machine Learning, Blockchain and Finance. All opinions are my own and do not express opinions of my employer.