Merge pull request #247288 from dlepow/corspo

[APIM] CORS proxy in test console

Author: v-regandowner

articles/api-management/api-management-howto-api-inspector.md

@@ -22,7 +22,7 @@ In this tutorial, you learn how to:
 > * Trace an example call
 > * Review request processing steps
 
-:::image type="content" source="media/api-management-howto-api-inspector/api-inspector-002.png" alt-text="API inspector":::
+:::image type="content" source="media/api-management-howto-api-inspector/api-inspector-002.png" alt-text="Screenshot showing the API inspector." lightbox="media/api-management-howto-api-inspector/api-inspector-002.png":::
 
 ## Prerequisites
 
@@ -36,7 +36,7 @@ To trace request processing, you must enable the **Allow tracing** setting for t
 
 1. Navigate to your API Management instance and select **Subscriptions** to review the settings.
 
-   :::image type="content" source="media/api-management-howto-api-inspector/allow-tracing-1.png" alt-text="Allow tracing for subscription":::
+   :::image type="content" source="media/api-management-howto-api-inspector/allow-tracing-1.png" alt-text="Screenshot showing how to allow tracing for subscription." lightbox="media/api-management-howto-api-inspector/allow-tracing-1.png":::
 1. If tracing isn't enabled for the subscription you're using, select the subscription and enable **Allow tracing**.
 
 [!INCLUDE [api-management-tracing-alert](../../includes/api-management-tracing-alert.md)]
@@ -57,7 +57,7 @@ To trace request processing, you must enable the **Allow tracing** setting for t
     * If your subscription doesn't already allow tracing, you're prompted to enable it if you want to trace the call. 
     * You can also choose to send the request without tracing.
 
-      :::image type="content" source="media/api-management-howto-api-inspector/06-debug-your-apis-01-trace-call-1.png" alt-text="Screenshot showing configure API tracing.":::
+      :::image type="content" source="media/api-management-howto-api-inspector/06-debug-your-apis-01-trace-call-1.png" alt-text="Screenshot showing configure API tracing." lightbox="media/api-management-howto-api-inspector/06-debug-your-apis-01-trace-call-1.png":::
 
 ## Review trace information
 

articles/api-management/media/api-management-howto-api-inspector/06-debug-your-apis-01-trace-call-1.png

@@ -1,18 +1,16 @@
 ## Test the new API in the portal
-
 Operations can be called directly from the portal, which provides a convenient way for administrators to view and test the operations of an API.  
-
 1. Select the API you created in the previous step.
 1. Select the **Test** tab.
 1. Select an operation.
-
     The page displays fields for query parameters and fields for the headers.
-
     > [!NOTE]
     > In the test console, API Management automatically populates an **Ocp-Apim-Subscription-Key** header, and configures the subscription key of the built-in [all-access subscription](../articles/api-management/api-management-subscriptions.md#all-access-subscription). This key enables access to every API in the API Management instance. Optionally display the **Ocp-Apim-Subscription-Key** header by selecting the "eye" icon next to the **HTTP Request**.
-
 1. Depending on the operation, enter query parameter values, header values, or a request body. Select **Send**.
 
-    When the test is successful, the backend responds with **200 OK** and some data.
+    When the test is successful, the backend responds with a successful HTTP response code and some data.
+
+    > [!TIP]
+    > By default, the test console sends a request to API Management's CORS proxy, which forwards the request to the API Management instance, which then forwards it to the backend. This proxy uses public IP address 13.91.254.72 and can only reach public endpoints. If you want to send a request directly from the browser to the API Management service, select **Bypass CORS proxy**. Use this option when you want to use the test console and your API Management gateway is network-isolated or doesn't allow traffic from the CORS proxy.
 
 To debug an API, see [Tutorial: Debug your APIs using request tracing](../articles/api-management/api-management-howto-api-inspector.md).