| Name | API Management services should disable public network access Azure Portal |
||||||||||||||||||||
| Id | df73bd95-24da-4a4f-96b9-4e8b94b402bd | ||||||||||||||||||||
| Version | 1.0.0 details on versioning |
||||||||||||||||||||
| Category | API Management Microsoft docs |
||||||||||||||||||||
| Description | To improve the security of API Management services, ensure that endpoints aren't exposed to the public internet. Some public endpoints are exposed by API Management services to support user scenarios, e.g. direct access to Management API, managing configuration using Git, self-hosted gateways configuration. If any of those features are not used, corresponding endpoints should be disabled. | ||||||||||||||||||||
| Mode | Indexed | ||||||||||||||||||||
| Type | BuiltIn | ||||||||||||||||||||
| Preview | FALSE | ||||||||||||||||||||
| Deprecated | FALSE | ||||||||||||||||||||
| Effect | Default AuditIfNotExists Allowed AuditIfNotExists, Disabled |
||||||||||||||||||||
| RBAC Role(s) |
none | ||||||||||||||||||||
| Rule Aliases |
IF (1)
|
||||||||||||||||||||
| Rule ResourceTypes |
IF (1) Microsoft.ApiManagement/service |
||||||||||||||||||||
| Compliance | Not a Compliance control | ||||||||||||||||||||
| History |
|
||||||||||||||||||||
| Initiatives usage |
none | ||||||||||||||||||||
| JSON |
|