AZ-204: Connect to and consume Azure services and third-party services - Part 1

https://azureezy.com
© 2020 AzureEzy and AzureTalk. All rights reserved!
Session 6
AZ-204: Connect to and
consume Azure services and
third-party services - Part 1
2

Today’s Session Speaker
Sanjib Panigrahi
AzureEzy Core Team
MCP, Sr Software Engineer
3
Ashish Raj
AzureEzy Co-founder
DevOps Architect, MCT

Win Azure Exam Vouchers
• Participate in quiz during session
• 6 Selected participants will get free Azure
Exam Vouchers
• 1 selected participant will get free print copy
of Demystifying Azure DevOps Services
• Must be registered on Eventbrite
• Winner will be announced in next session
• #AzureEzy
4
Free Azure Exam
Vouchers

Developer Associate- Cert Path
5

AZ-204: Skills Measured
• Develop Azure compute solutions (25-30%)
• Develop for Azure storage (15-20%)
• Implement Azure security (20-25%)
• Monitor, troubleshoot, and optimize Azure
solutions (15-20%)
• Connect to and consume Azure services and
third-party services (15-20%)
6

Prerequisites
• Hands-on experience with Azure IaaS, PaaS solutions, and Azure Portal
• Experience writing in an Azure supported language at the intermediate
level. (C#, JavaScript, Python, or Java)
• Ability to write code to connect and perform operations on, a SQL or
NoSQL database product. (SQL Server, Oracle, MongoDB, Cassandra or
similar)
• Experience writing code to handle authentication, authorization, and
other security principles at the intermediate level
• Understanding of HTML, HTTP protocol and REST API interfaces
7

Agenda
•Implement API Management
•create an APIM instance
•configure authentication for APIs
•define policies for APIs
8

create an APIM instance
9

Why APIM
• API documentations
• Rate limiting access
• Monitoring
• Single JSON format
• API Usage Analysis
• Security

Pricing
11
Consumption Developer Basic Standard Premium
Isolated
Preview
Scale-out (units) N/A 1 2 4 12 per region
12 per
region
SLA 99.95% No 99.95% 99.95% 99.99% 1 99.99%
Isolation Shared Private Private Private Private Private
Usage limits Limits apply No No No No No
https://azure.microsoft.com/en-us/pricing/details/api-management/

APIM Setup
• Create APIM Gateway
• Register existing web API
• Call web API through Gateway

Create APIM Gateway
13

Import API

APIM Components
• API Gateway
• Azure Portal
• Developer Portal
• Products
• Groups
• Developers
• Administrators
• Guests
• Policies

Configure authentication for
APIs
16

Authentication in API
• Subscription Key
• Client Certificate

Using Subscription Key
curl --header "Ocp-Apim-Subscription-Key: <key string>" https://<apim gateway>.azure-api.net/api/path
curl https://<apim gateway>.azure-api.net/api/path?subscription-key=<key string>

Using Certificate
Property Reason
Certificate
Authority
(CA)
Only allow certificates signed by
a particular CA.
Thumbprint Allow certificates containing a
specified thumbprint.
Subject Only allow certificates with a
specified subject.
Expiration
Date
Only allow certificates that have
not expired.

Policies
20

APIM Policy
• Set limits
• Convert response format
• Enforce security

Policy Execution & Scope
• Inbound
• Backend
• Outbound
• On-Error
• Global
• Product
• API
• Operation
When?

Policy Example
<policies>
<inbound>
<base />
<check-header name="Authorization" failed-check-httpcode="401" failed-check-error-message="Not authorized" ignore-case="false">
</check-header>
</inbound>
<backend> <base />
</backend>
<outbound>
<base />
<json-to-xml apply="always" consider-accept-header="false" parse-date="false" />
</outbound>
<on-error>
<base />
</on-error>
</policies>

Authentication Policy example
<choose>
<when condition="@(context.Request.Certificate == null || context.Request.Certificate.Thumbprint != "desired-thumbprint")" >
<return-response>
<set-status code="403" reason="Invalid client certificate" />
</return-response>
</when>
</choose>
24

Common Policies
• Access restrictions
• Authentication policies
• Cross domain
• Transformation policies

Break
26

Demo
1. Creating a multi-tier solution by using services in Azure
➢ Creating a multi-tier solution by using services in Azure
➢ Build an API proxy tier by using Azure API Management
27

Quiz
30
https://q.azureezy.com/az-204
Free Azure Exam Vouchers
Winners' announcement in next session on 29th August 2021
Register for next session at azureezy.com/az-204
Update your skills on LinkedIn and enter a chance to win
Surface Go!!
More info @ https://azureezy.com/azure-skills-feb21

Winners Announcements
• Winners for Previous Session “Monitor, troubleshoot, and
optimize Azure solutions”
31

32
https://bharatguru.in
https://www.linkedin.com/in/vipinkumarjha/
https://www.linkedin.com/in/ashishrajsrivastava
https://azuredevopspro.com
https://youtube.com/AshishRajSrivastava
@ashishrajs
https://www.linkedin.com/in
/sanjibpanigrahi/
Thanks!
https://azureezy.com/az-204
https://t.me/AzureTalk
https://youtube.com/AzureTalk
https://t.me/AzureDevOpsPro

AZ-204: Connect to and consume Azure services and third-party services - Part 1

AZ-204: Connect to and consume Azure services and third-party services - Part 1

Recommended

More Related Content

What's hot

What's hot(20)

Similar to AZ-204: Connect to and consume Azure services and third-party services - Part 1

Similar to AZ-204: Connect to and consume Azure services and third-party services - Part 1(20)

Recently uploaded

Recently uploaded(20)

AZ-204: Connect to and consume Azure services and third-party services - Part 1