Andrew Wilson's Blog

{ ... Plan - Architect - Develop - Reflect - Improve - Repeat ... }

Azure API Management | Function App Backend

Overview

GitHub Repository

Following on from a previous set of posts from earlier this year where I detailed how to securely implement Logic App Standard backends in Azure API Management, there has been questions on how this would be achieved in a similar manner with Azure Function Apps.

To read-up on how this …


Speaking | Azure Security Do's and Don'ts: A Developer's Checklist for Secure Azure Applications

AzureOnAir

Static Badge

I recently had the privilege to be hosted on the Azure on Air podcast by the Turbo360 team. I had a great conversation with Lex discussing the importance of a “security first” mindset in the world of Azure solutions, and how this mindset should be carried out as a priority in …


Azure Role Based Access Control (RBAC) | Removing Orphaned Role Assignments

Problem Space

Deploying solutions into Azure that rely on Role Based Access often involve us creating IaC automation for the assignment of roles, such as:

  • A services access to Key Vault
  • A services access to a Key Vault specific secret
  • A services access to a storage account
  • A services access to a …


Azure API Management | Enable Tracing for an API

Background

For a while now I have made good use of the Trace functionality in the API Management (APIM) Test Client. If you haven’t, I would highly advise having a look. The Trace functionality allows us to unveil (debug) the complexity and inner workings of our reverse proxy APIs (their …


Azure API Management | Unintentional Removal of Request Forwarding to Backend

Problem Space

I have recently been working on an API scoped policy within API Management, the policy ideally should not be impacted by any policies defined higher up in the hierarchy.

For reference, this means that any policies defined at the Product, Workspace, or Global level will not be inherited …