Network misconfigurations

Azure API management service with unsupported SKU

Platform(s)
Compliance Frameworks
  • CPRA
  • ,
  • iso_27001_2022
  • ,
  • iso_27002_2022
  • ,
  • NIST 800-53
  • ,
  • PDPA

Description

It was detected that {AzureApiManagement} is defined with SKU that does not support virtual networks. With supported SKUs of API Management, Azure API Management can be deployed inside an Azure virtual network (VNet) to access backend services within the network. With Azure virtual networks (VNets), you can place your API Management instance in a non-internet-routable network to which you control access. In a virtual network, your API Management instance can securely access other networked Azure resources and also connect to on-premises networks using various VPN technologies. For more information, see https://learn.microsoft.com/en-us/azure/api-management/virtual-network-concepts?tabs=stv2.