Would be great to expose the api via apim and show how to lock access to the api using. Particular focus is on ci cd process for getting swagger from the api into apim.