Skip to content

Create APIM-enabled network secured agent setup variant (16-private-network-standard-agent-apim-setup-preview)#2

Draft
Copilot wants to merge 10 commits intomainfrom
copilot/fix-dd676b5d-b142-4512-adc3-ed994c216497
Draft

Create APIM-enabled network secured agent setup variant (16-private-network-standard-agent-apim-setup-preview)#2
Copilot wants to merge 10 commits intomainfrom
copilot/fix-dd676b5d-b142-4512-adc3-ed994c216497

Conversation

Copy link

Copilot AI commented Aug 22, 2025

This PR creates a new infrastructure setup variant that adds Azure API Management (APIM) integration to the existing network-secured standard agent deployment. The new folder 16-private-network-standard-agent-apim-setup-preview provides an enhanced version of the standard setup with optional APIM gateway capabilities.

What's New

New Infrastructure Setup Variant

  • Folder: samples/microsoft/infrastructure-setup/16-private-network-standard-agent-apim-setup-preview/
  • Based on: Existing folder 15 (network-secured standard agent setup)
  • Enhancement: Optional Azure API Management integration for advanced API gateway features

Key Features

  • API Gateway Capabilities: Request/response transformation, throttling, authentication, and monitoring
  • Private Connectivity: APIM connected via private endpoints for secure communication within network perimeter
  • Optional Integration: Requires existing APIM service resource ID to be provided (does not create APIM automatically)
  • Preview Status: Marked as preview to indicate this is an enhanced experimental variant

Technical Implementation

The infrastructure templates already contained comprehensive APIM support including:

  • Parameter definition (apiManagementResourceId) for optional APIM integration
  • Private endpoint creation for APIM with Gateway sub-resource
  • Private DNS zone setup (privatelink.azure-api.net) for secure name resolution
  • Conditional resource validation and deployment logic

Documentation Updates

  • Enhanced README: Updated title, description, and overview to highlight APIM integration
  • New APIM Section: Added dedicated documentation explaining APIM features and requirements
  • Parameter Documentation: Clear instructions for providing existing APIM resource ID
  • Deploy Button: Updated to point to the new folder's deployment template
  • Index Update: Added entry in main infrastructure setup README

Preserved Original Setup

  • Folder 15 Unchanged: The original 15-private-network-standard-agent-setup remains completely untouched
  • No Breaking Changes: Existing users can continue using folder 15 without any impact
  • Clean Separation: New folder 16 serves as an independent variant with enhanced capabilities

Use Cases

This setup is ideal for organizations that want to:

  • Add centralized API management and monitoring to their AI agent deployments
  • Implement advanced request routing, transformation, and security policies
  • Maintain network isolation while gaining enterprise-grade API gateway features
  • Leverage existing APIM investments in their AI infrastructure

The setup maintains all the security and isolation benefits of the standard network-secured deployment while adding optional enterprise API management capabilities.


💡 You can make Copilot smarter by setting up custom instructions, customizing its development environment and configuring Model Context Protocol (MCP) servers. Learn more Copilot coding agent tips in the docs.

vtomarmic and others added 8 commits August 14, 2025 11:16
- Fixed parameter inconsistency between Bicep and JSON templates
- Replaced separate apiManagementName, apiManagementResourceGroupName, apiManagementSubscriptionId parameters with single apiManagementResourceId parameter
- Updated README.md with comprehensive API Management documentation
- Added API Management to template customization section
- Added API Management to private endpoints documentation
- Added API Management to Private DNS Zones table
- Maintains consistency with other resource parameter patterns
Copilot AI and others added 2 commits August 22, 2025 13:03
…w with APIM integration

Co-authored-by: Vijendra123 <22127810+Vijendra123@users.noreply.github.com>
Co-authored-by: Vijendra123 <22127810+Vijendra123@users.noreply.github.com>
Copilot AI changed the title [WIP] Look at the current PR, @azure-ai-foundry/foundry-samples/pull/285 We need to add make changes in this PR to move out changes made in samples/microsoft/infrastructure-setup/15-private-network-standard-agent-setup folder and create a new folder 16-priva... Create APIM-enabled network secured agent setup variant (16-private-network-standard-agent-apim-setup-preview) Aug 22, 2025
Copilot AI requested a review from Vijendra123 August 22, 2025 13:07
@Vijendra123
Copy link
Owner

Vijendra123 commented Aug 22, 2025

@copilot Now you need to reset the 15- folder to whats in the remote repo where this is forked from

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants