Access APIM through Private Endpoint using public App Gateway

Question

I disabled public access in my APIM and trying to make it publicly available through Application Gateway (with public IP), but I'm getting 403 as requests are originating from a public IP:

{

"statusCode": 403,

"message": "Request originated from client public IP address ...., public network access on this `Microsoft.ApiManagement/service/my-apim` is disabled. To connect to `Microsoft.ApiManagement/service/my-apim`, please use the Private Endpoint from inside your virtual network. To learn more https://aka.ms/apim-privateendpoint "

}

From Application Gateway I'm targeting APIM Private Endpoint.

How I can make APIM (basic tier) available through Application Gateway and disable direct APIM public access?

Answer 1

@Vasiliy Grinko Thanks for reaching out. You can make APIM (basic tier) available through Application Gateway and disable direct APIM public access as long as Application gateway virtual network can connect to Private link of APIM.

Error message says Request originated from client public IP address it means request going through public not private so configuration in app gateway could be incorrect.

you need to check the network from app gateway to APIM see if it's really going through private endpoint.