Skip to content

Commit 33ef713

Browse files
v-thepetv-thepet
committed
mc
2 parents 0177857 + 4113d10 commit 33ef713

File tree

482 files changed

+3161
-1857
lines changed

Some content is hidden

Large Commits have some content hidden by default. Use the searchbox below for content that may be hidden.

482 files changed

+3161
-1857
lines changed

‎.openpublishing.redirection.json

Lines changed: 6 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -7058,6 +7058,12 @@
70587058
"source_path": "articles/cyclecloud/release-notes/ccws/2025.02.06.md",
70597059
"redirect_url": "/azure/cyclecloud/release-notes/ccws/2025-02-06",
70607060
"redirect_document_id": false
7061+
},
7062+
{
7063+
"source_path": "articles/reliability/whats-new.md",
7064+
"redirect_url": "/azure/reliability/overview",
7065+
"redirect_document_id": false
70617066
}
70627067
]
70637068
}
7069+

‎articles/api-center/synchronize-api-management-apis.md

Lines changed: 2 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -4,7 +4,7 @@ description: Integrate an API Management instance to Azure API Center for automa
44
author: dlepow
55
ms.service: azure-api-center
66
ms.topic: how-to
7-
ms.date: 06/02/2025
7+
ms.date: 06/18/2025
88
ms.author: danlep
99
ms.custom: devx-track-azurecli
1010
# Customer intent: As an API program manager, I want to integrate my Azure API Management instance with my API center and synchronize API Management APIs to my inventory.
@@ -32,6 +32,7 @@ API Management APIs automatically synchronize to the API center whenever existin
3232
> [!NOTE]
3333
> * Integration of Azure API Management is currently in preview.
3434
> * There are [limits](../azure-resource-manager/management/azure-subscription-service-limits.md?toc=/azure/api-center/toc.json&bc=/azure/api-center/breadcrumb/toc.json#azure-api-center-limits) for the number of integrated API Management instances (API sources).
35+
> * An integrated API Management instance can be configured in a virtual network.
3536
> * API updates in API Management typically synchronize to your API center within minutes, but synchronization can take up to 24 hours.
3637
> * API definitions also synchronize to the API center if you select the option to include them during integration.
3738

‎articles/api-management/api-management-capacity.md

Lines changed: 4 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -6,7 +6,7 @@ author: dlepow
66

77
ms.service: azure-api-management
88
ms.topic: how-to
9-
ms.date: 04/17/2025
9+
ms.date: 06/16/2025
1010
ms.author: danlep
1111
ms.custom:
1212
- fasttrack-edit
@@ -42,6 +42,9 @@ In the v2 tiers, the following metrics are available:
4242

4343
* **Memory Percentage of Gateway** - The percentage of memory capacity used by the gateway units.
4444

45+
> [!NOTE]
46+
> Currently, the Memory Percentage of Gateway metric isn't supported in the Premium v2 tier.
47+
4548
Available aggregations for these metrics are as follows.
4649

4750
* **Avg** - Average percentage of capacity used across gateway processes in every [unit](upgrade-and-scale.md) of an API Management instance.

‎articles/api-management/api-management-howto-autoscale.md

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -13,7 +13,7 @@ ms.custom: engagement-fy23
1313

1414
# Automatically scale an Azure API Management instance
1515

16-
[!INCLUDE [api-management-availability-premium-standard-basic](../../includes/api-management-availability-premium-standard-basic.md)]
16+
[!INCLUDE [api-management-availability-premium-standard-basic-premiumv2-standardv2-basicv2](../../includes/api-management-availability-premium-standard-basic-premiumv2-standardv2-basicv2.md)]
1717

1818
An Azure API Management service instance can scale automatically based on a set of rules. This behavior can be enabled and configured through [Azure Monitor autoscale](/azure/azure-monitor/autoscale/autoscale-overview#supported-services-for-autoscale).
1919

@@ -64,7 +64,7 @@ Follow these steps to configure autoscale for an Azure API Management service:
6464
|-----------------------|-------------------|---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------|
6565
| Metric source | Current resource | Define the rule based on the current API Management resource metrics. |
6666
| *Criteria* | | |
67-
| Metric name | Capacity | [Capacity metric](api-management-capacity.md) is an API Management metric reflecting usage of resources by an Azure API Management instance. |
67+
| Metric name | Capacity | [Capacity metric](api-management-capacity.md) is one of the API Management metrics reflecting usage of resources by an Azure API Management instance. Choose a capacity metric supported in your API Management service tier. |
6868
| Location | Select the primary location of the API Management instance | |
6969
| Operator | Greater than | |
7070
| Metric threshold | 70% | The threshold for the averaged capacity metric. For considerations on setting this threshold, see [Using capacity for scaling decisions](api-management-capacity.md#use-capacity-for-scaling-decisions). |

‎articles/api-management/api-management-region-availability.md

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -6,7 +6,7 @@ author: dlepow
66

77
ms.service: azure-api-management
88
ms.topic: concept-article
9-
ms.date: 05/28/2025
9+
ms.date: 06/17/2025
1010
ms.author: danlep
1111
ms.custom:
1212
- references_regions
@@ -34,7 +34,7 @@ Information in the following table is updated regularly. Capacity availability i
3434
| Central India | ✅ | ✅ | | |
3535
| East Asia | ✅ | ✅ | | ✅ |
3636
| East US | ✅ | ✅ | | |
37-
| East US 2 | ✅ | ✅ | | ✅ |
37+
| East US 2 | ✅ | ✅ | ✅ | ✅ |
3838
| France Central | ✅ | ✅ | | ✅ |
3939
| Germany West Central | ✅ | ✅ | ✅ | ✅ |
4040
| Japan East | ✅ | ✅ | | ✅ |

‎articles/api-management/developer-portal-overview.md

Lines changed: 4 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -7,7 +7,7 @@ author: dlepow
77

88
ms.service: azure-api-management
99
ms.topic: concept-article
10-
ms.date: 04/28/2025
10+
ms.date: 06/04/2025
1111
ms.author: danlep
1212
---
1313

@@ -64,9 +64,9 @@ If you're accessing the portal for the first time, the portal includes placehold
6464
For a step-by-step walkthrough of customizing and publishing the developer portal, see [Tutorial: Access and customize the developer portal](api-management-howto-developer-portal-customize.md).
6565

6666
> [!IMPORTANT]
67-
> * Access to the developer portal by API publishers and consumers requires network connectivity to both the developer portal's endpoint (default: `https://<apim-instance-name>.portal.azure-api.net`) and the API Management instance's management endpoint (default: `https://<apim-instance-name>.management.azure-api.net`).
67+
> * Access to the developer portal by API publishers and consumers requires network connectivity to the developer portal's endpoint (default: `https://<apim-instance-name>.portal.azure-api.net`).
6868
> * Publishing the developer portal requires additional connectivity to blob storage managed by API Management in the West US region.
69-
> * If the API Management instance is deployed in a VNet, ensure that the hostnames of the developer portal and management endpoint resolve properly and that you enable connectivity to required dependencies for the developer portal. [Learn more](virtual-network-reference.md).
69+
> * If the API Management instance is deployed in a VNet, ensure that the hostname of the developer portal resolves properly and that you enable connectivity to required dependencies for the developer portal. [Learn more](virtual-network-reference.md).
7070
7171
### Visual editor
7272

@@ -268,4 +268,4 @@ Learn more about the developer portal:
268268
Browse other resources:
269269

270270
- [GitHub repository with the source code](https://github.com/Azure/api-management-developer-portal)
271-
- [Frequently asked questions about the developer portal](developer-portal-faq.md)
271+
- [Frequently asked questions about the developer portal](developer-portal-faq.md)

‎articles/api-management/self-hosted-gateway-enable-dapr.md

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -18,7 +18,7 @@ Dapr integration in API Management enables operations teams to directly expose D
1818

1919
## About Dapr
2020

21-
Dapr is a portable runtime for building stateless and stateful microservices-based applications with any language or framework. It codifies the common microservice patterns, like service discovery and invocation with build-in retry logic, publish-and-subscribe with at-least-once delivery semantics, or pluggable binding resources to ease composition using external services. Go to [dapr.io](https://dapr.io) for detailed information and instruction on how to get started with Dapr.
21+
Dapr is a portable runtime for building stateless and stateful microservices-based applications with any language or framework. It codifies the common microservice patterns, like service discovery and invocation with built-in retry logic, publish-and-subscribe with at-least-once delivery semantics, or pluggable binding resources to ease composition using external services. Go to [dapr.io](https://dapr.io) for detailed information and instruction on how to get started with Dapr.
2222

2323
## Enable Dapr support
2424

‎articles/api-management/v2-service-tiers-overview.md

Lines changed: 1 addition & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -6,7 +6,7 @@ author: dlepow
66

77
ms.service: azure-api-management
88
ms.topic: concept-article
9-
ms.date: 05/09/2025
9+
ms.date: 06/16/2025
1010
ms.author: danlep
1111
ms.custom:
1212
- references_regions
@@ -77,7 +77,6 @@ The following API Management capabilities are currently unavailable in the v2 ti
7777
* Multiple custom domain names
7878
* Capacity metric - *replaced by CPU Percentage of Gateway and Memory Percentage of Gateway metrics*
7979
* Built-in analytics - *replaced by Azure Monitor-based dashboard*
80-
* Autoscaling
8180
* Upgrade to v2 tiers from classic tiers
8281
* CA Certificates
8382
* Sending events to Event Grid

‎articles/api-management/validate-client-certificate-policy.md

Lines changed: 30 additions & 14 deletions
Original file line numberDiff line numberDiff line change
@@ -54,11 +54,11 @@ For more information about custom CA certificates and certificate authorities, s
5454

5555
| Name | Description | Required | Default |
5656
| ------------------------------- | -----------------| -------- | ----------- |
57-
| validate-revocation  | Boolean. Specifies whether certificate is validated against online revocation list. Policy expressions aren't allowed.  | No | `true` |
58-
| validate-trust | Boolean. Specifies if validation should fail in case chain cannot be successfully built up to trusted CA. Policy expressions aren't allowed. | No | `true` |
59-
| validate-not-before | Boolean. Validates value against current time. Policy expressions aren't allowed.| No | `true` |
60-
| validate-not-after  | Boolean. Validates value against current time. Policy expressions aren't allowed.| No | `true`|
61-
| ignore-error  | Boolean. Specifies if policy should proceed to the next handler or jump to on-error upon failed validation. Policy expressions aren't allowed. | No | `false` |
57+
| validate-revocation | Boolean. Specifies whether certificate is validated against online revocation list. Policy expressions aren't allowed. | No | `true` |
58+
| validate-trust| Boolean. Specifies if validation should fail in case chain cannot be successfully built up to trusted CA. Policy expressions aren't allowed. | No | `true` |
59+
| validate-not-before | Boolean. Validates value against current time. Policy expressions aren't allowed.| No| `true` |
60+
| validate-not-after | Boolean. Validates value against current time. Policy expressions aren't allowed.| No| `true`|
61+
| ignore-error | Boolean. Specifies if policy should proceed to the next handler or jump to on-error upon failed validation. Policy expressions aren't allowed. | No | `false` |
6262

6363
## Elements
6464

@@ -70,27 +70,24 @@ For more information about custom CA certificates and certificate authorities, s
7070

7171
| Name | Description | Required | Default |
7272
| ------------------------------- | -----------------| -------- | ----------- |
73-
| thumbprint | Certificate thumbprint. | No | N/A |
73+
| thumbprint | Certificate SHA-1 thumbprint. | No | N/A |
7474
| serial-number | Certificate serial number. | No | N/A |
7575
| common-name | Certificate common name (part of Subject string). | No | N/A |
7676
| subject | Subject string. Must follow format of Distinguished Name, which consists of comma-separated name attributes, for example, *"CN=MyName, OU=MyOrgUnit, C=US..."*.| No | N/A |
7777
| dns-name | Value of dnsName entry inside Subject Alternative Name claim. | No | N/A |
78-
| issuer-subject | Issuer's subject. Must follow format of Distinguished Name, which consists of comma-separated name attributes, for example, *"CN=MyName, OU=MyOrgUnit, C=US..."*. | No | N/A |
79-
| issuer-thumbprint | Issuer thumbprint. | No | N/A |
80-
| issuer-certificate-id | Identifier of existing certificate entity representing the issuer's public key. Mutually exclusive with other issuer attributes. | No | N/A |
78+
| issuer-subject | Issuer's subject. Must follow format of Distinguished Name. | No | N/A |
79+
| issuer-thumbprint | Issuer SHA-1 thumbprint. | No | N/A |
80+
| issuer-certificate-id | Identifier of existing certificate entity representing the issuer's public key. Mutually exclusive with other issuer attributes. | No | N/A |
81+
8182

8283
## Usage
8384

8485
- [**Policy sections:**](./api-management-howto-policies.md#understanding-policy-configuration) inbound
8586
- [**Policy scopes:**](./api-management-howto-policies.md#scopes) global, workspace, product, API, operation
8687
- [**Gateways:**](api-management-gateways-overview.md) classic, v2, consumption, self-hosted, workspace
8788

89+
## Examples
8890

89-
### Usage notes
90-
91-
* You must use double quotes to enclose values of name attributes in the `subject` and `issuer-subject` attributes when they contain certain special characters such as ",". For example, specify `O="Contoso, Inc."` instead of `O=Contoso, Inc.` for the organization name. [Learn more](/windows/win32/api/wincrypt/nf-wincrypt-certnametostra#remarks)
92-
93-
## Example
9491

9592
The following example validates a client certificate to match the policy's default validation rules and checks whether the subject and issuer name match specified values.
9693

@@ -109,6 +106,25 @@ The following example validates a client certificate to match the policy's defau
109106
</validate-client-certificate>
110107
```
111108

109+
The following example performs a stricter validation by cheking whether the subject thumbprint and the issuer thumbprint match specified values.
110+
111+
```xml
112+
<validate-client-certificate
113+
validate-revocation="true"
114+
validate-trust="true"
115+
validate-not-before="true"
116+
validate-not-after="true"
117+
ignore-error="false">
118+
<identities>
119+
<identity
120+
thumbprint="AA11BB22CC33DD44EE55FF66AA77BB88CC99DD00"
121+
issuer-thumbprint="BB22CC33DD44EE55FF66AA77BB88CC99DD00EE11" />
122+
</identities>
123+
</validate-client-certificate>
124+
```
125+
126+
127+
112128
## Related policies
113129

114130
* [Authentication and authorization](api-management-policies.md#authentication-and-authorization)

‎articles/api-management/virtual-network-reference.md

Lines changed: 2 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -6,7 +6,7 @@ author: dlepow
66

77
ms.service: azure-api-management
88
ms.topic: reference
9-
ms.date: 04/17/2025
9+
ms.date: 06/17/2025
1010
ms.author: danlep
1111
ms.custom: references_regions
1212
---
@@ -42,6 +42,7 @@ When an API Management service instance is hosted in a VNet, the ports in the fo
4242
|-------|--------------|----------|---------|------------|-----------|-----|--------|-----|
4343
| Inbound | Internet | * | VirtualNetwork | [80], 443 | TCP | Allow | **Client communication to API Management** | External only |
4444
| Inbound | ApiManagement | * | VirtualNetwork | 3443 | TCP | Allow | **Management endpoint for Azure portal and PowerShell** | External & Internal |
45+
| Outbound | VirtualNetwork | * | Internet | 80 | TCP | Allow | **Validation and management of Microsoft-managed and customer-managed certificates** | External & Internal |
4546
| Outbound | VirtualNetwork | * | Storage | 443 | TCP | Allow | **Dependency on Azure Storage** | External & Internal |
4647
| Outbound | VirtualNetwork | * | AzureActiveDirectory | 443 | TCP | Allow | [Microsoft Entra ID, Microsoft Graph,](api-management-howto-aad.md) and Azure Key Vault dependency (optional) | External & Internal |
4748
| Outbound | VirtualNetwork | * | AzureConnectors | 443 | TCP | Allow | [managed connections](credentials-overview.md) dependency (optional) | External & Internal |

0 commit comments

Comments
 (0)