You are securing an API hosted in Azure API Management (APIM). The API must validate a JSON Web Token (JWT) sent by clients in the Authorization header. Additionally, APIM must use its own system-assigned managed identity to authenticate against the secure backend service. You need to configure the APIM policy definition.
Which two actions should you perform? (Select two.)
- Add the `validate-jwt` policy to the `<inbound>` section of the policy definition.Cevap
- Add the `authentication-managed-identity` policy to the `<inbound>` section of the policy definition.Cevap
- CAdd the `validate-jwt` policy to the `<outbound>` section of the policy definition.
- DAdd the `authentication-managed-identity` policy to the `<outbound>` section of the policy definition.
- EAdd the `authentication-managed-identity` policy to the `<inbound>` section and specify a user-assigned client ID.
Cevap
Add the `validate-jwt` policy to the `<inbound>` section of the policy definition, and add the `authentication-managed-identity` policy to the `<inbound>` section of the policy definition.
To secure the API endpoints, the incoming token must be validated, and credentials for the backend must be attached before forwarding the request. The `validate-jwt` policy and the `authentication-managed-identity` policy must both be defined in the `<inbound>` section of the APIM policy. The system-assigned identity is used directly without specifying any client ID parameters.
Adım Adım Çözüm
Anahtar Kavram
Azure API Management inbound policies for JWT validation and backend authentication using managed identities
Tahmini Süre:1m 0s