Basics of Azure API Management policies with examples

In this section, we will focus on provisioning our own Azure API Management instance with a policy deployed. Before we start on the practical aspects, let’s define what a policy is.

As Azure API Management acts as a proxy for each request, it can apply various checks and enforcements for them. In other words, if we want to verify the contents of a request, validate it, block it, or apply a rate limit, a policy is exactly what we need.

Note

Azure API Management allows for the deployment of both in-built and custom policies. In-built policies can also be changed to speed up the deployment of custom ones.

Policy schema

Each policy has a fixed schema that we can extend based on desired logic, as illustrated in the following code snippet:

<policies>
  <inbound>
    <!—- logic applied for incoming requests -->
  </inbound>
  &lt...