Mastering Azure API Management : A Practical Approach to Designing and Implementing an API-Centric Enterprise Architecture

Unsure of how or where to get started with Azure API Management, Microsoft’s managed service for securing, maintaining, and monitoring APIs? Then this guide is for you. Azure API Management integrates services like Azure Kubernetes Services (AKS), Function Apps, Logic Apps, and many others with the cloud and provides users with a single, unified, and well-structured façade in the cloud. Mastering Azure API Management is designed to help API developers and cloud engineers learn all aspects of Azure API Management, including security and compliance. It provides a pathway for getting started and learning valuable management and administration skills. You will learn what tools you need to publish a unified API façade towards backend services, independent of where and what they run on. You will begin with an overview of web APIs. You will learn about today’s challenges and how a unified API management approach can help you address them. From there you’ll dive into the key concepts of Azure API Management and be given a practical view and approach of API development in the context of Azure API Management. You'll then review different ways of integrating Azure API Management into your enterprise architecture. From there, you will learn how to optimally maintain and administer Azure API Management to secure your APIs, and learn from them, gaining valuable insights through logging and monitoring. What You Will Learn Discover the benefits of an enterprise API platform Understand the basic concepts of API management in the Microsoft cloud Develop and publish your APIs in the context of Azure API Management Onboard users through the developer portal Help your team or other developers to publish their APIs more efficiently Integrate Azure API Management securely into your enterprise architecture Manage and maintain to secure your APIs and gain insights Who This Book Is For API developers, cloud engineers, and Microsoft Azure enthusiasts who want to deep dive into managing an API-centric enterprise architecture with Azure API Management. To get the most out of the book, the reader should have a good understanding of micro services and APIs. Basic coding skills, including some experience with PowerShell and Azure, are also beneficial. Table of Contents About the Author About the Technical Reviewer Acknowledgments Foreword Introduction Part I: Getting Started Chapter 1: Quick Start Create an Azure Account Provision Azure API Management Add API Test API API Management Portal Command Line Summary Chapter 2: Overview Unlocking Digital Assets with APIs Payments Manufacturing Automotive Understanding the Basics of web APIs SOAP WSDL REST WADL OpenAPI HTTP Clients for Testing RESTful web APIs cURL Postman Enterprise API Platform in Essence Consistent Documentation Comprehensible Capabilities Common Design Guidelines API User Onboarding User Management Health Monitoring Governance and Compliance Versioning and Revisioning Scalability and Resiliency Security DevOps Performance Stability Introducing Azure API Management Azure Portal Interacting with Azure API Management Developer Portal API Gateway Summary Part II: Key Concepts Chapter 3: APIs and Products APIs Create Blank API with Azure CLI Add API Operation Update API Operation Manage APIs with Azure PowerShell Create API from Azure Resources Create Web Application in Azure App Service Create API from Azure App Service Web Application Products Create APIs Create Products Add APIs to Products Summary Chapter 4: Users and Groups Groups System Groups Create a Group Associate Groups to Products Users Create a User Deactivate and Reactivate a User Add a User to a Group Summary Chapter 5: Versions and Revisions Versions Version Scheme Add a New Version Revisions Add a New Revision Make Revision Current Summary Chapter 6: Subscriptions Creating a Subscription Revealing Subscription Keys Calling API with Subscription Key Summary Chapter 7: Policies and Named Values Policies Simple Policy Scoping Calculating Effective Policy Expressions Single Statement Expressions Multi-Statement Expressions Named Values Plaintext Secrets Secrets from Azure Key Vault Enable Managed System Identity in Azure API Management Preparing Azure Key Vault Using Secret from Azure Key Vault in Policies Examples Validations Content Validation Parameter Validation Other Validations Canary Backend APIs Summary Chapter 8: Developer Portal Overview Customization Styling Notifications and Templates Self-hosting Running the Developer Portal Locally Summary Part III: Workflow Chapter 9: API Development in Context Centralized API Repository Internal Repository External Repository Application Repositories Product Deployment with Azure Pipeline Summary Chapter 10: Developing Policies Azure Portal Visual Studio Code Extension Installation Developing a Policy Testing an API Debugging a Policy Summary Chapter 11: Deploying APIs ARM Templates Bicep REST Terraform Summary Chapter 12: Power Apps Creating a Connection Creating a Power App Summary Part IV: Enterprise Integration Chapter 13: Networking Internal Virtual Network (VNET) External VNET No VNET Backend Integration with AKS Summary Chapter 14: Self-hosted API Gateway Creating a Self-hosted API Gateway Deploying a Self-hosted API Gateway Configuration Service Endpoint Authorization Token Deployment Updating the Self-hosted API Gateway Summary Part V: Maintenance Chapter 15: Security Authentication HTTP Basic Authentication to Backend Web Services Authentication with OAuth 2.0 Backend App Client App Azure API Management Instance Settings Test and Validate Other Security Aspects Subscriptions Protecting Against Path Traversal Attacks Summary Chapter 16: Logging and Monitoring Logging via Event Hub Deploy an Azure Event Hub Set Event Hub Logger to Azure API Management Add Event Hub Logger to Policy Observing Logs with VS Code Logging to Azure Log Analytics Azure Application Insights Summary Chapter 17: Administration High Availability Scaling in Regions Preparing for a Disaster with Backup and Restore Configuring External Caching Adding Custom Domains Monetizing Your APIs with User Reports Azure Automation Creating an Azure Automation Account Connecting to Azure API Management Azure Logic Apps Summary Index Unsure of how or where to get started with Azure API Management, Microsoft's managed service for securing, maintaining, and monitoring APIs? Then this guide is for you. Azure API Management integrates services like Azure Kubernetes Services (AKS), Function Apps, Logic Apps, and many others with the cloud and provides users with a single, unified, and well-structured façade in the cloud. Mastering Azure API Management is designed to help API developers and cloud engineers learn all aspects of Azure API Management, including security and compliance. It provides a pathway for getting started and learning valuable management and administration skills. You will learn what tools you need to publish a unified API façade towards backend services, independent of where and what they run on. You will begin with an overview of web APIs. You will learn about today's challenges and how a unified API management approach can help you address them. From there you'll dive into the key concepts of Azure API Management and be given a practical view and approach of API development in the context of Azure API Management. You'll then review different ways of integrating Azure API Management into your enterprise architecture. From there, you will learn how to optimally maintain and administer Azure API Management to secure your APIs, and learn from them, gaining valuable insights through logging and monitoring. What You Will Learn Discover the benefits of an enterprise API platform Understand the basic concepts of API management in the Microsoft cloud Develop and publish your APIs in the context of Azure API Management Onboard users through the developer portal Help your team or other developers to publish their APIs more efficiently Integrate Azure API Management securely into your enterprise architecture Manage and maintain to secure your APIs and gain insights This book is for API developers, cloud engineers, and Microsoft Azure enthusiasts who want to deep dive into managing an API-centric enterprise architecture with Azure API Management. To get the most out of the book, the reader should have a good understanding of micro services and APIs. Basic coding skills, including some experience with PowerShell and Azure, are also beneficial. Sven Malvik is an experienced Azure expert. He specializes in compliance and digital transformation, most recently in the financial industry. He has decades of experience in software development, DevOps, and cloud engineering. Sven is a Microsoft MVP in Azure and a speaker, presenting sessions and tutorials at a number of global conferences, user group meetings, and international companies "Pepper comes through again with this clever tale of how cyber sabotage of elections, coupled with highly concentrated ownership of traditional media operations, can undermine American democracy."--President Bill Clinton. A twisty, one-step-ahead-of-the-headlines political thriller featuring a rogue reporter who investigates election meddling of epic proportions written by the ultimate insider. Investigative reporter Jack Sharpe is down to his last chance. Fired from his high-profile gig with a national news channel, his only lead is a phone full of messages from a grad student named Tori Justice, who swears she's observed an impossible result in a local election. Sharpe is sure she's mistaken ... but what if she isn't? Sharpe learns that the most important tool in any election is the voter file: the database that keeps track of all voters in a district, and shapes a campaign's game plan for victory. If one person were to gain control of an entire party's voter file, they could manipulate the outcome of virtually every election in America. Sharpe discovers this has happened--and that the person behind the hack is determined to turn American politics upside down. The more he digs, the more Sharpe is forced to question the values--and viability--of the country he loves and a president he admired. And soon it becomes clear that not just his career is in jeopardy ... so is his life