What should you include in the solution?

You are designing a microservices architecture that will be hosted in an Azure Kubernetes Service (AKS) cluster. Apps that will consume the microservices will be hosted on Azure virtual machines. The virtual machines and the AKS cluster will reside on the same virtual network.

You need to design a solution to expose the microservices to the consumer apps.

The solution must meet the following requirements:

• Ingress access to the microservices must be restricted to a single private IP address and protected by using mutual TLS authentication.

• The number of incoming microservice calls must be rate-limited.

• Costs must be minimized.

What should you include in the solution?
A . Azure API Management Premium tier with virtual network connection
B . Azure Front Door with Azure Web Application Firewall (WAF)
C . Azure API Management Standard tier with a service endpoint
D . Azure App Gateway with Azure Web Application Firewall (WAF)

View Answer

Answer: A

Explanation:

One option is to deploy APIM (API Management) inside the cluster VNet.

The AKS cluster and the applications that consume the microservices might reside within the same VNet, hence there is no reason to expose the cluster publicly as all API traffic will remain within the VNet. For these scenarios, you can deploy API Management into the cluster VNet. API Management Premium tier supports VNet deployment.

Reference: https://docs.microsoft.com/en-us/azure/api-management/api-management-kubernetes