azure - APIM 背后的消费计划 Azure Function

Question

出于网络隔离的目的，我想仅通过 APIM 公开 azure 函数，并阻止任何直接 HTTP 调用。

它按照消耗计划运行，因此 I cannot use the virtual network integration and private endpoint .

除了切换到高级或专用应用服务计划之外，还有其他解决方案吗？

Answer 1

当使用 Azure Functions 的消费计划和 APIM 的基本 SKU 时，有一种解决方法允许仅从 APIM 实例访问 Azure Function API。

解决步骤:

1. As Application Gateway is already configured for public access, assigned public IP address is used to communicate API Management instance. Therefore, NAT Gateway for communication with API Management instance is optional (not required).
2. Configure API Management instance to accept only traffic from Application Gateway instance. Along with source IP restriction, subscription key is also acceptable.
3. Configure Function app to accept only traffic from API Management instance. Along with source IP restriction, API host key and authentication are also acceptable.

引用Accept only traffic from a front-end service (API Management, Functions)了解实际的解决方法。