NSG for Azure API管理外部访问

我创建了一个没有路由的API管理实例，并且将NSG应用于API管理子网，一切正常.我能够从Internet和Azure门户访问API管理门户，并测试了包括内部和Internet的后端API.

I created an API management instance without route and NSG applied to API management subnet, everything worked well. I was able to access the API management portal from internet and Azure portal, and tested backend APIs including internal and internet.

但是，出于安全考虑，我想使用NSG来控制Internet访问，以便仅允许特定的公共IP地址访问.所以我遵循了https://docs.microsoft.com/en-us/azure/api-management/api-management-using-with-vnet并创建了 NSG并将其应用于API管理子网，然后单击应用网络配置". API管理实例.虽然我可以从互联网访问API管理门户，但是所有针对API的测试均失败，如下所示"

However, due to security concerns, i wanted to use NSG to control the internet access so that only a specific public ip address is allowed to access. So I followed https://docs.microsoft.com/en-us/azure/api-management/api-management-using-with-vnet and created a NSG and applied it to API management subnet, and click "Apply Network Configuration" to the API management instance. Though i am able to access the API management portal from internet, but all tests for APIs failed showing as below"

日期:格林尼治标准时间2018年11月28日星期三

www-authenticate:AzureApiManagementKey realm =" https://itspapim1.azure-api.net/test6，名称= "Ocp-Apim-Subscription-Key"，type ="header"

变化:起源

内容类型:application/json

内容长度:152

{

"statusCode":401，

    "statusCode": 401,

消息":由于缺少订阅密钥，访问被拒绝.向API发出请求时，请确保包括订阅密钥."

    "message": "Access denied due to missing subscription key. Make sure to include subscription key when making requests to an API."

}