APIM zone redundant changes

Eddie Vincent 205 Reputation points
2025-10-22T11:28:15.6666667+00:00

Scenario: Upgrading an older version of APIM (pre 2024) to add zone redundancy/resiliency.

  • Platform version stv2.1.
  • Premium SKU.
  • VNet injected APIM version.
  • Standard public IP address (pre-zone redundancy feature).
  • Internal VNet option: https://free.blessedness.top/en-us/azure/api-management/api-management-using-with-internal-vnet
  • Deploying via code (not Azure portal) preferred.
  • APIM is within a supported region for this setup.
  • Wanting to change the public IP address to zone redundant and the "locations" section within APIM itself - units and availability zones section as can be seen below.

User's image

With the above points in mind I am looking for the best way of doing this, especially when taking into account the decoupled nature of the Public IP address and APIM instance (since the below is now apparently possible also).

User's image

Questions include:

  1. Is an APIM instance with the managed "no public IP" option (May 2024) only available for newly built APIM instances and not pre-existing?
  2. If no then how would you upgrade to a managed option from pre-existing APIM?
  3. If yes what are the concerns about future proofing the environment, were the non-managed/decoupled option ever to become EOL.

Appreciate any constructive responses, thanks!

Azure API Management
Azure API Management
An Azure service that provides a hybrid, multi-cloud management platform for APIs.
{count} votes

Answer accepted by question author
  1. Pravallika KV 165 Reputation points Microsoft External Staff Moderator
    2025-10-22T13:42:40.98+00:00

    Hi Eddie Vincent,

    Thanks for reaching out to Microsoft Q&A,

    1. Pre-2024 APIM instances cannot directly switch to the fully managed “no public IP” option; it’s only available for new deployments.
    2. Zone redundancy requires adding multiple units and specifying availability zones in the locations section.
    3. Existing public IPs can be decoupled, but upgrading to a managed zone-redundant IP usually requires creating a new IP.
    4. Future-proofing favors using decoupled or managed IPs to simplify scaling and ensure resiliency.
    5. Migration to a new managed APIM instance is recommended for full AZ and managed IP benefits.
    6. Deployment via ARM/Bicep/terraform allows code-driven updates of units, zones, and public IP assignments.

    Hope it helps!


    Please do not forget to click "Accept the answer” and Yes, this can be beneficial to other community members.

    User's image

    If you have any other questions, let me know in the "comments" and I would be happy to help you.

    1 person found this answer helpful.
    0 comments No comments

0 additional answers

Sort by: Most helpful

Your answer

Answers can be marked as 'Accepted' by the question author and 'Recommended' by moderators, which helps users know the answer solved the author's problem.