fabriciosanchez

# step 7 - upload cert for SSL-enabled backend pool resources
$authcert = New-AzApplicationGatewayAuthenticationCertificate `
    -Name "whitelistcert" `
    -CertificateFile $gatewayCertCerPath

fabriciosanchez

# step 6 - create custom probes for API-M endpoints
$apimprobe = New-AzApplicationGatewayProbeConfig `
    -Name "apim-api-probe" `
    -Protocol "Https" `
    -HostName $gatewayHostname `
    -Path "/status-0123456789abcdef" `
    -Interval 30 `
    -Timeout 120 `
    -UnhealthyThreshold 8

fabriciosanchez

# step 5 - configure HTTP listeners for the App Gateway
$listener = New-AzApplicationGatewayHttpListener `
    -Name "apim-api-listener" `
    -Protocol "Https" `
    -FrontendIPConfiguration $fipconfig01 `
    -FrontendPort $fp01 `
    -SslCertificate $cert `
    -HostName $gatewayHostname `
    -RequireServerNameIndication true

fabriciosanchez

# step 4 - configure certs for the App Gateway
$cert = New-AzApplicationGatewaySslCertificate `
    -Name "apim-gw-cert" `
    -CertificateFile $gatewayCertPfxPath `
    -Password $certPwd

$certPortal = New-AzApplicationGatewaySslCertificate `
    -Name "apim-portal-cert" `
    -CertificateFile $portalCertPfxPath `
    -Password $certPortalPwd

fabriciosanchez

# step 3 - configure the front-end IP with the public IP endpoint
$fipconfig01 = New-AzApplicationGatewayFrontendIPConfig `
    -Name "frontend1" `
    -PublicIPAddress $publicip

fabriciosanchez

# step 2 - configure the front-end IP port for the public IP endpoint
$fp01 = New-AzApplicationGatewayFrontendPort `
    -Name "frontend-port443" `
    -Port 443

fabriciosanchez

# Create Application Gateway configuration
# step 1 - create App GW IP config
$gipconfig = New-AzApplicationGatewayIPConfiguration `
    -Name "gatewayIP" `
    -Subnet $appgatewaysubnetdata

fabriciosanchez

# Create a public IP address for the Application Gateway front-end
$publicip = New-AzPublicIpAddress `
    -ResourceGroupName $resGroupName `
    -name "aumanager-appgw-pip" `
    -location $location `
    -AllocationMethod Dynamic

fabriciosanchez

# Specify cert configuration
$gatewayHostname = "api.americasuniversity.net"
$portalHostname = "portal.americasuniversity.net"
$gatewayCertCerPath = "C:\AmericasUniversity\certs\api\api.americasuniversity.net.cer"
$gatewayCertPfxPath = "C:\AmericasUniversity\certs\api\api.americasuniversity.net.pfx"
$portalCertPfxPath = "C:\AmericasUniversity\certs\portaldev\portal.americasuniversity.net.pfx"
$gatewayCertPfxPassword = "cert-api-password"
$portalCertPfxPassword = "cert-portal-password"

# Convert to secure string before send it over HTTP

fabriciosanchez

# Create an API Management VNET object
$apimVirtualNetwork = New-AzApiManagementVirtualNetwork -SubnetResourceId $apimsubnetdata.Id

# Create an API-M service inside the VNET
$apimServiceName = "aumanager-apim"
$apimOrganization = "Americas University"
$apimAdminEmail = "{alias}@americasuniversity.net"

$apimService = New-AzApiManagement `
    -ResourceGroupName $resGroupName `