Network misconfigurations

Azure API management service with unsupported SKU

Compliance Frameworks


It was detected that {AzureApiManagement} is defined with SKU that does not support virtual networks. With supported SKUs of API Management, Azure API Management can be deployed inside an Azure virtual network (VNet) to access backend services within the network. With Azure virtual networks (VNets), you can place your API Management instance in a non-internet-routable network to which you control access. In a virtual network, your API Management instance can securely access other networked Azure resources and also connect to on-premises networks using various VPN technologies. For more information, see
  • Recommended Mitigation

    It is recommended to use supported API Management SKU (Developer, Premium, or Isolated) in order to be able to enable advanced API Management networking and security features.