MyPlatform: Automated Governance, Risk, and Compliance (GRC) for a Secure and Efficient Managed Azure Platform.

Bundle Integration Platform

## A Technical Description of MyPlatform's Templated Integration Platform

MyPlatform has designed a templated Integration Platform to provide a secure, scalable, and manageable foundation for all your Application Programming Interfaces (APIs) and integrations. The true value of this template lies in its opinionated configuration of key Azure services, creating a cohesive platform that enforces security, provides high availability, and automates the entire API lifecycle. This ensures that as you build and expose services, you are adhering to best practices from day one.

## Integrated Services for a Modern Integration Platform

Our Integration Platform template orchestrates several critical Azure services into a powerful, unified solution. Each element is essential for creating a robust environment for publishing, securing, and managing your APIs.

Secure Entry Point and Threat Protection

  • Application Gateway w/WAF Shared Service: The template deploys an Azure Application Gateway with an integrated Web Application Firewall (WAF) as the primary, public-facing entry point for all external API traffic. This WAF is pre-configured with rules to protect against common web vulnerabilities and exploits (like those in the OWASP Top 10), providing a critical first line of defense before any request reaches your APIs.

  • Application Gateway w/WAF for Internal Services: If a Core Network is present in your environment, the template provisions a separate, internal Application Gateway. This ensures that traffic between your internal applications and APIs is also inspected and secured, providing consistent policy enforcement for both internal and external consumers.

Centralized API Lifecycle Management

  • Azure API Management Premium: At the core of the platform is Azure API Management (APIM) Premium. This service acts as a facade and proxy for your backend services. Our template configures APIM to handle crucial tasks such as authentication (e.g., OAuth 2.0, API Keys), authorization, rate limiting, request/response transformation, and caching. The Premium tier is specifically chosen for its enterprise-grade features, including VNet integration for enhanced security and multi-region deployment for high availability and performance.

  • Integrated API Lifecycle Repo and Deployment Process: To ensure consistency and reliability, the template establishes a CI/CD (Continuous Integration/Continuous Deployment) process. It integrates your APIM configuration with a source code repository (like Azure Repos or GitHub). This "API-as-Code" approach means all changes to APIs—from policy updates to new endpoint definitions—are managed through version control and deployed via an automated pipeline. This dramatically reduces manual errors and streamlines the development-to-production workflow.

## Understanding Consumption and Costs

Activating this comprehensive Integration Platform will drive consumption across several Azure services, most notably API Management Premium and the data processing costs associated with the Application Gateway w/WAF. The premium tiers provide essential features for production workloads but represent a significant investment.

To ensure cost transparency, we provide a pre-configured template for the Azure Calculator. By inputting your expected number of API calls and data transfer volumes, you can generate an accurate cost estimate for running this best-practice platform, allowing for predictable budgeting and a clear understanding of your total cost of ownership.

MyPlatform | Secure & Compliant Azure Managed Platform

MyPlatform: Automated Governance, Risk, and Compliance (GRC) for a Secure and Efficient Managed Azure Platform.