Azure API Management

Inside scoop from the API Management team

Azure API Management release notes – April 18, 2018

On April 18, 2018, we started a regular service update. We upgrade service instances in batches, and it takes about a week for the update to reach every active service instance. New functionality Now it is possible to disable MSI using management API by either omitting the identity property or setting its value to null. Management API now… Read more

Release Notes – March 14, 2018

Below are the new features shipped with this release: New functionality Now you can reference a policy document instead of providing it inline when setting policies at global, product, API and operation scopes via management API by providing a body formatted as: { “contentFormat”: “xml-link”, “policyContent”: “http://publicly-available-site.com/policy.xml” } Trigger a welcome email when creating a new user… Read more

Certificate pinning in Azure API Management

Each API Management service instance is created with a default domain name that is a customer-specified subdomain of Microsoft owned domain azure-api.net, for example, contoso.azure-api.net. Default domain names are secured with a wildcard certificate owned by Microsoft issued for *.azure-api.net. Customers who wish to use certificate pinning to improve the security of their applications must… Read more

Upcoming changes to TLS defaults in API Management required to maintain compliance

We would like to let you know about upcoming security improvements we’re making for PCI compliance. The PCI Security Standards Council announced that PCI-compliant web applications must transition from TLS version 1.0 to TLS 1.1 or higher by June 30, 2018. At present: API Management service instances are created with TLS 1.0/1.1/1.2 enabled by default 3DES cipher… Read more

Release notes – August 23, 2017

On Wednesday, August 23, 2017, we started deploying a regular service update. We upgrade production service instances in batches, and it usually takes about a week for the rollout to complete. Below is the list of improvements and bug fixes in this release. New functionality Versions and revisions (yay!) give you flexibility in how you manage change and your API lifecycle…. Read more

Notifications, Notification templates and Identity providers can now be managed from new Azure Portal

Next up in our continued stream of releases of functionality in the Azure Portal come the capabilities for configuring Notifications, Notification templates and Identity providers. Notifications API Management can send e-mail notifications when a number of system events occur, like for example new subscriptions being created. For each event, a list of e-mail addresses will be notified…. Read more

Release Notes – March 8, 2017

On Wednesday, March 8, 2017, we started deploying a regular service update. We upgrade production service instances in batches, and it usually takes about a week for the rollout to complete. Customers in the Central US EAUP region should have access shortly. Below is the list of the new features, improvements and bug fixes in this release…. Read more

Release notes – February 23, 2017

On Tuesday, February 21, 2017, we started deploying a regular service update. We upgrade production service instances in batches and it usually takes about a week for the rollout to complete. Customers in the Central US EAUP region already have access. Below is the list of the new features, improvements and bug fixes in this release. New… Read more

Release Notes – February 2, 2017

On Wednesday, February 2, 2017, we started deploying a regular service update. We upgrade production service instances in batches and it usually takes several days for the rollout to complete. Below is the list of the new features, improvements and bug fixes in this release. Updates and fixes Service instance backups are now valid for… Read more

Announcement: Changes to the transport-level security options on instances created prior to October 1, 2015

On December 1, 2016, we will make the following changes affecting gateway-to-backend connectivity on all API Management instances created before October 1, 2015: – SSL 3.0 will be disabled – TLS 1.1 and 1.2 will be enabled – TLS 1.0 will remain enabled The instances created after October 2015 will not be affected, since they… Read more