Use HTTPS backend connections

Security · API Management · Azure.APIM.HTTPBackend

Use HTTPS for communication to backend services.

Description

When API Management connects to the backend API it can use HTTP or HTTPS. When using HTTP, sensitive information may be exposed to an untrusted party.

Recommendation

Consider configuring only backend services configured with HTTPS-based URLs.

Links

• Data encryption in Azure

---

Last update: 2021-09-24