Mastering Azure API Management: A Practical Approach to Designing and Implementing an API-Centric Enterprise Architecture

✍ Scribed by Sven Malvik

• Publisher: Apress
• Year: 2022
• Tongue: English
• Leaves: 273
• Category: Library

✦ Synopsis

Unsure of how or where to get started with Azure API Management, Microsoft’s managed service for securing, maintaining, and monitoring APIs? Then this guide is for you. Azure API Management integrates services like Azure Kubernetes Services (AKS), Function Apps, Logic Apps, and many others with the cloud and provides users with a single, unified, and well-structured façade in the cloud.

Mastering Azure API Management is designed to help API developers and cloud engineers learn all aspects of Azure API Management, including security and compliance. It provides a pathway for getting started and learning valuable management and administration skills. You will learn what tools you need to publish a unified API façade towards backend services, independent of where and what they run on.

You will begin with an overview of web APIs. You will learn about today’s challenges and how a unified API management approach can help you address them. From there you’ll dive into the key concepts of Azure API Management and be given a practical view and approach of API development in the context of Azure API Management. You'll then review different ways of integrating Azure API Management into your enterprise architecture. From there, you will learn how to optimally maintain and administer Azure API Management to secure your APIs, and learn from them, gaining valuable insights through logging and monitoring.

What You Will Learn

• Discover the benefits of an enterprise API platform
• Understand the basic concepts of API management in the Microsoft cloud
• Develop and publish your APIs in the context of Azure API Management
• Onboard users through the developer portal
• Help your team or other developers to publish their APIs more efficiently
• Integrate Azure API Management securely into your enterprise architecture
• Manage and maintain to secure your APIs and gain insights

Who This Book Is For
API developers, cloud engineers, and Microsoft Azure enthusiasts who want to deep dive into managing an API-centric enterprise architecture with Azure API Management. To get the most out of the book, the reader should have a good understanding of micro services and APIs. Basic coding skills, including some experience with PowerShell and Azure, are also beneficial.

✦ Table of Contents

Table of Contents
About the Author
About the Technical Reviewer
Acknowledgments
Foreword
Introduction
Part I: Getting Started
Chapter 1: Quick Start
Create an Azure Account
Provision Azure API Management
Add API
Test API
API Management Portal
Command Line
Summary
Chapter 2: Overview
Unlocking Digital Assets with APIs
Payments
Manufacturing
Automotive
Understanding the Basics of web APIs
SOAP
WSDL
REST
WADL
OpenAPI
HTTP Clients for Testing RESTful web APIs
cURL
Postman
Enterprise API Platform in Essence
Consistent Documentation
Comprehensible Capabilities
Common Design Guidelines
API User Onboarding
User Management
Health Monitoring
Governance and Compliance
Versioning and Revisioning
Scalability and Resiliency
Security
DevOps
Performance
Stability
Introducing Azure API Management
Azure Portal
Interacting with Azure API Management
Developer Portal
API Gateway
Summary
Part II: Key Concepts
Chapter 3: APIs and Products
APIs
Create Blank API with Azure CLI
Add API Operation
Update API Operation
Manage APIs with Azure PowerShell
Create API from Azure Resources
Create Web Application in Azure App Service
Create API from Azure App Service Web Application
Products
Create APIs
Create Products
Add APIs to Products
Summary
Chapter 4: Users and Groups
Groups
System Groups
Create a Group
Associate Groups to Products
Users
Create a User
Deactivate and Reactivate a User
Add a User to a Group
Summary
Chapter 5: Versions and Revisions
Versions
Version Scheme
Add a New Version
Revisions
Add a New Revision
Make Revision Current
Summary
Chapter 6: Subscriptions
Creating a Subscription
Revealing Subscription Keys
Calling API with Subscription Key
Summary
Chapter 7: Policies and Named Values
Policies
Simple Policy
Scoping
Calculating Effective Policy
Expressions
Single Statement Expressions
Multi-Statement Expressions
Named Values
Plaintext
Secrets
Secrets from Azure Key Vault
Enable Managed System Identity in Azure API Management
Preparing Azure Key Vault
Using Secret from Azure Key Vault in Policies
Examples
Validations
Content Validation
Parameter Validation
Other Validations
Canary Backend APIs
Summary
Chapter 8: Developer Portal
Overview
Customization
Styling
Notifications and Templates
Self-hosting
Running the Developer Portal Locally
Summary
Part III: Workflow
Chapter 9: API Development in Context
Centralized API Repository
Internal Repository
External Repository
Application Repositories
Product Deployment with Azure Pipeline
Summary
Chapter 10: Developing Policies
Azure Portal
Visual Studio Code Extension
Installation
Developing a Policy
Testing an API
Debugging a Policy
Summary
Chapter 11: Deploying APIs
ARM Templates
Bicep
REST
Terraform
Summary
Chapter 12: Power Apps
Creating a Connection
Creating a Power App
Summary
Part IV: Enterprise Integration
Chapter 13: Networking
Internal Virtual Network (VNET)
External VNET
No VNET
Backend Integration with AKS
Summary
Chapter 14: Self-hosted API Gateway
Creating a Self-hosted API Gateway
Deploying a Self-hosted API Gateway
Configuration
Service Endpoint
Authorization Token
Deployment
Updating the Self-hosted API Gateway
Summary
Part V: Maintenance
Chapter 15: Security
Authentication
HTTP Basic Authentication to Backend Web Services
Authentication with OAuth 2.0
Backend App
Client App
Azure API Management Instance Settings
Test and Validate
Other Security Aspects
Subscriptions
Protecting Against Path Traversal Attacks
Summary
Chapter 16: Logging and Monitoring
Logging via Event Hub
Deploy an Azure Event Hub
Set Event Hub Logger to Azure API Management
Add Event Hub Logger to Policy
Observing Logs with VS Code
Logging to Azure Log Analytics
Azure Application Insights
Summary
Chapter 17: Administration
High Availability
Scaling in Regions
Preparing for a Disaster with Backup and Restore
Configuring External Caching
Adding Custom Domains
Monetizing Your APIs with User Reports
Azure Automation
Creating an Azure Automation Account
Connecting to Azure API Management
Azure Logic Apps
Summary
Index