# Build Azure API Management with .NET

Provisioning Azure API Management with .NET requires correct SDK patterns and resource hierarchy knowledge. This skill provides focused examples for authentication, resources, policies, backups, and error handling.

## Install

```bash
npx skillstore add sickn33/azure-mgmt-apimanagement-dotnet
```

## Metadata

- Status: approved
- Slug: sickn33-azure-mgmt-apimanagement-dotnet
- Skillstore revision: r2
- Version status: missing
- Tree hash: 41536dc26cc92e0cf922f6df95b481ccc672a02c1ed3a8331eab5715a5a156f7
- Author: sickn33
- GitHub username: sickn33
- License: MIT
- Repository: https://github.com/sickn33/antigravity-awesome-skills/tree/main/skills/azure-mgmt-apimanagement-dotnet
- Ref: f9e2c34b4f19c7f3e6b0a1e93227b5f77cc12526
- Supported tools: Claude, Codex, Claude Code
- Audit status: complete
- Agent install advisory: confirmation\_required
- Manual install advisory: allowed
- Artifact signature: available
- Audit attestation: unavailable
- Human verification: not\_verified
- Risk factors: external\_commands, network, env\_access
- Quality score: 38
- Quality tier: warning
- Public page: https://skillstore.pages.dev/skills/sickn33-azure-mgmt-apimanagement-dotnet
- Manifest: https://skillstore.pages.dev/api/skills/sickn33-azure-mgmt-apimanagement-dotnet/manifest

## Capabilities

- Provides package installation commands for Azure.ResourceManager.ApiManagement and Azure.Identity.
- Shows authentication with DefaultAzureCredential and subscription resource selection.
- Demonstrates creating APIM services, APIs, products, and subscriptions.
- Demonstrates applying an XML policy with rate limiting and header modification.
- Shows managed-identity backup and restore configuration.
- Provides RequestFailedException handling patterns for ARM errors.

## Use Cases

- Create an APIM development service: Prepare .NET code that authenticates to Azure and provisions a Developer SKU service.
- Automate API product setup: Model APIs, products, subscriptions, and access policies through repeatable ARM SDK operations.
- Plan resilient APIM administration: Add exception handling, operation waiting, backup, and restore patterns to an APIM management workflow.

## Prompt Templates

### Set up authentication

```
Show how to install the required .NET packages and authenticate to Azure subscription [subscription ID] with DefaultAzureCredential.
```

### Provision a service and API

```
Create a .NET workflow for APIM service [service name] in [region] and connect API [API name] to [backend URL].
```

### Configure access and policy

```
Add API [API name] to product [product name], create a subscription, and apply rate limit [calls] per [seconds].
```

### Design a resilient workflow

```
Design an end-to-end .NET workflow for [service] with APIM resources, policies, ARM error handling, and managed-identity backup and restore.
```

## Limitations

- Covers management-plane resources, not requests to deployed API gateway endpoints.
- Requires valid Azure identifiers, credentials, permissions, and environment-specific values.
- Examples require testing before production use and may need updates for newer SDK versions.
- Referenced supplemental files are not included in the scanned package.

## Best Practices

- Use DefaultAzureCredential and grant only the Azure roles required for each management task.
- Use idempotent create-or-update operations and select waiting behavior based on workflow dependencies.
- Validate names, regions, SKUs, policies, and backend endpoints in a nonproduction subscription first.

## Anti Patterns

- Do not hardcode Azure credentials, subscription keys, or storage access keys.
- Do not print subscription secrets or other sensitive values to console output.
- Do not run service creation or restore operations without confirming cost, permissions, and recovery impact.

## Security Audit

- Audited at: 2026-07-23T21:02:16.751\+00:00
- Summary: All 51 static findings are false positives caused by Markdown formatting, placeholder configuration, sample URLs, or official documentation links. The skill contains no prompt injection or covert execution behavior. One high-severity semantic issue remains: an example prints an APIM subscription key to console output.

## Stats

- Views: 87
- Downloads: 9
- Favorites: 0
- Popularity score: 0
