In a webinar we hosted last year alongside Dave Phelps, ‘The Ultimate Logic Apps Best Practices Guide: Mastering Security’, Dave kindly demonstrated how to streamline secure API management and Logic Apps in Azure.
🔑 API Management is protected using Azure AD, ensuring only authorised users can access it. Logic Apps are also secured using Azure AD, requiring tokens for authorisation.
🔄Managed Identity is enabled in API Management to obtain tokens and securely communicate with Logic Apps. This approach eliminates the need for traditional SAS tokens, enhancing security and simplifying authorisation.
📊 Dave demonstrated the complete authorisation flow using Postman:
Client → API Management → Logic App → Service Bus → Successful 200 OK