Home

flowchart TD

subgraph Partner managed resources
    netwp["Partner network"]
end

subgraph Public internet
    sbi["Any network"]
end


subgraph Microsoft managed resources
    subgraph Microsoft Fabric
        we["Synapse Pipeline"]
    end
    
    subgraph Managed Virtual Network   
        mpe[Managed Private Endpoint] 
    end

    we --> mpe
end

subgraph Customer managed resources

    netwc["Customer network"]

    netwc --> privatefi

    subgraph Azure Application Gateway
        pubblicfi["Public frontend IP"]
        privatefi["Private frontend IP"]
    end

    waf["Azure Web Application Firewall"]

    mpe -- Private Endpoint Connection --> privatefi
    netwp --> waf 
    sbi --> waf
    waf --> pubblicfi

    subgraph Azure API Management
        subgraph Private product
            apiprivate["TimeRegistration API"]
        end

        subgraph Partner product
            apipartner["Accountant API"]
        end

        subgraph Public product
            apipublic["MyPublicData API"]
        end
    end

    privatefi -- APIM network policy --> apiprivate

    pubblicfi -- APIM network policy --> apipartner
    pubblicfi -- APIM rate policy --> apipublic

    entraid["Microsoft Entra"]
    apiprivate -- JWT RBAC --> entraid
    apipartner -- JWT RBAC --> entraid

end

Loading