API Collections - List By Azure Api Management Service
Gets a list of onboarded Azure API Management APIs
Gets a list of Azure API Management APIs that have been onboarded to Microsoft Defender for APIs. If an Azure API Management API is onboarded to Microsoft Defender for APIs, the system will monitor the operations within the Azure API Management API for intrusive behaviors and provide alerts for attacks that have been detected.
GET https://management.azure.com/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.ApiManagement/service/{serviceName}/providers/Microsoft.Security/apiCollections?api-version=2023-11-15
URI Parameters
| Name | In | Required | Type | Description |
|---|---|---|---|---|
|
resource
|
path | True |
string minLength: 1maxLength: 90 |
The name of the resource group. The name is case insensitive. |
|
service
|
path | True |
string minLength: 1maxLength: 50 pattern: ^[a-zA-Z](?:[a-zA-Z0-9-]*[a-zA-Z0-9])?$ |
The name of the API Management service. |
|
subscription
|
path | True |
string (uuid) |
The ID of the target subscription. The value must be an UUID. |
|
api-version
|
query | True |
string minLength: 1 |
The API version to use for this operation. |
Responses
| Name | Type | Description |
|---|---|---|
| 200 OK |
This indicates a successful response. The response contains the list of API collections. |
|
| Other Status Codes |
Error response describing why the operation failed. |
Security
azure_auth
Azure Active Directory OAuth2 Flow
Type:
oauth2
Flow:
implicit
Authorization URL:
https://login.microsoftonline.com/common/oauth2/authorize
Scopes
| Name | Description |
|---|---|
| user_impersonation | impersonate your user account |
Examples
Gets a list of Azure API Management APIs that have been onboarded to Microsoft Defender for APIs
Sample request
Sample response
{
"value": [
{
"id": "/subscriptions/3fa85f64-5717-4562-b3fc-2c963f66afa6/resourceGroups/rg1/providers/Microsoft.ApiManagement/service/apimService1/providers/Microsoft.Security/apiCollections/echo-api",
"name": "echo-api",
"type": "Microsoft.Security/apiCollections",
"properties": {
"provisioningState": "Succeeded",
"displayName": "Echo API",
"discoveredVia": "/subscriptions/3fa85f64-5717-4562-b3fc-2c963f66afa6/resourceGroups/rg1/providers/Microsoft.ApiManagement/service/apimService1",
"baseUrl": "https://apimservice1.azure-api.net/echo",
"numberOfApiEndpoints": 6,
"numberOfInactiveApiEndpoints": 3,
"numberOfUnauthenticatedApiEndpoints": 1,
"numberOfExternalApiEndpoints": 3,
"numberOfApiEndpointsWithSensitiveDataExposed": 1,
"sensitivityLabel": "Highly Confidential"
}
}
],
"nextLink": "https://management.azure.com/subscriptions/3fa85f64-5717-4562-b3fc-2c963f66afa6/resourceGroups/rg1/providers/Microsoft.ApiManagement/service/apimService1/providers/Microsoft.Security/apiCollections?api-version=2023-11-15&$skipToken=ac943fd6a934"
}
Definitions
| Name | Description |
|---|---|
|
Api |
An API collection as represented by Microsoft Defender for APIs. |
|
Api |
Page of a list of API collections as represented by Microsoft Defender for APIs. |
|
Error |
The resource management error additional info. |
|
Error |
The error detail. |
|
Error |
Error response |
|
Provisioning |
Gets the provisioning state of the API collection. |
ApiCollection
An API collection as represented by Microsoft Defender for APIs.
| Name | Type | Description |
|---|---|---|
| id |
string |
Resource Id |
| name |
string |
Resource name |
| properties.baseUrl |
string (uri) |
The base URI for this API collection. All endpoints of this API collection extend this base URI. |
| properties.discoveredVia |
string (arm-id) |
The resource Id of the resource from where this API collection was discovered. |
| properties.displayName |
string |
The display name of the API collection. |
| properties.numberOfApiEndpoints |
integer (int64) |
The number of API endpoints discovered in this API collection. |
| properties.numberOfApiEndpointsWithSensitiveDataExposed |
integer (int64) |
The number of API endpoints in this API collection which are exposing sensitive data in their requests and/or responses. |
| properties.numberOfExternalApiEndpoints |
integer (int64) |
The number of API endpoints in this API collection for which API traffic from the internet was observed. |
| properties.numberOfInactiveApiEndpoints |
integer (int64) |
The number of API endpoints in this API collection that have not received any API traffic in the last 30 days. |
| properties.numberOfUnauthenticatedApiEndpoints |
integer (int64) |
The number of API endpoints in this API collection that are unauthenticated. |
| properties.provisioningState |
Gets the provisioning state of the API collection. |
|
| properties.sensitivityLabel |
string |
The highest priority sensitivity label from Microsoft Purview in this API collection. |
| type |
string |
Resource type |
ApiCollectionList
Page of a list of API collections as represented by Microsoft Defender for APIs.
| Name | Type | Description |
|---|---|---|
| nextLink |
string |
The URI to fetch the next page. |
| value |
API collections in this page. |
ErrorAdditionalInfo
The resource management error additional info.
| Name | Type | Description |
|---|---|---|
| info |
object |
The additional info. |
| type |
string |
The additional info type. |
ErrorDetail
The error detail.
| Name | Type | Description |
|---|---|---|
| additionalInfo |
The error additional info. |
|
| code |
string |
The error code. |
| details |
The error details. |
|
| message |
string |
The error message. |
| target |
string |
The error target. |
ErrorResponse
Error response
| Name | Type | Description |
|---|---|---|
| error |
The error object. |
ProvisioningState
Gets the provisioning state of the API collection.
| Value | Description |
|---|---|
| Succeeded | |
| Failed | |
| Canceled | |
| InProgress |