Azure APIM - Ip Filter Inbound

Andrea Longhitano 100 Reputation points
2024-07-18T22:16:45.3433333+00:00

Hello everyone,

I would like to allow API calls exposed through APIM only from specifico ips.

I know that there is the possibility to configure it through policy APIM, but unfortunately the solution could not be applied in my context since the ip addresses may change over time. (ip of dynamics 365). Is It possible to apply a NSG that allow calls only from specific IP? Using NSG I can apply those rules since I can use the Service Tag of Dynamics 365.

Thank you,

Andrea

Azure API Management
Azure API Management
An Azure service that provides a hybrid, multi-cloud management platform for APIs.
2,060 questions
0 comments

1 answer

Sort by: Most helpful
Most helpful Newest Oldest
  1. JananiRamesh-MSFT 26,151 Reputation points
    2024-07-19T05:49:10.64+00:00

    @Andrea Longhitano Thanks for reaching out. Yes, it is possible to use a Network Security Group to allow API calls only from specific IP addresses.

    Determine the IP address or IP address range that you want to allow traffic from. In your case, you can use the Service Tag of Dynamics 365 to determine the IP address range.

    Create a new NSG rule that allows traffic from the IP address or IP address range that you want to allow. You can create this rule in the Azure portal by navigating to the NSG resource, selecting "Inbound security rules", and clicking "Add".

    Apply the NSG to the APIM instance. You can do this by associating the NSG with the subnet that the APIM instance is deployed to.

    Once you have applied the NSG to the APIM instance, only traffic from the specified IP address or IP address range will be allowed to access the APIM instance.

    do let me know incase of further queries, I would be happy to assist you.

Your answer

Answers can be marked as Accepted Answers by the question author, which helps users to know the answer solved the author's problem.