flowchart TD subgraph Partner managed resources netwp["Partner network"] end subgraph Public internet sbi["Any network"] end subgraph Microsoft managed resources subgraph Microsoft Fabric we["Synapse Pipeline"] end subgraph Managed Virtual Network mpe[Managed Private Endpoint] end we --> mpe end subgraph Customer managed resources netwc["Customer network"] netwc --> privatefi subgraph Azure Application Gateway pubblicfi["Public frontend IP"] privatefi["Private frontend IP"] end waf["Azure Web Application Firewall"] mpe -- Private Endpoint Connection --> privatefi netwp --> waf sbi --> waf waf --> pubblicfi subgraph Azure API Management subgraph Private product apiprivate["TimeRegistration API"] end subgraph Partner product apipartner["Accountant API"] end subgraph Public product apipublic["MyPublicData API"] end end privatefi -- APIM network policy --> apiprivate pubblicfi -- APIM network policy --> apipartner pubblicfi -- APIM rate policy --> apipublic entraid["Microsoft Entra"] apiprivate -- JWT RBAC --> entraid apipartner -- JWT RBAC --> entraid end