APIM NSG: Allow inbound traffic from the Application Gateway subnet on 443. Allow necessary outbound traffic for APIM's management plane (e.g., to Azure services using Service Tags like AzureKeyVault, ...
Create Service Connections in Azure DevOps for each of the APIM instances you want to migrate from and to. Create a variable group in Azure DevOps called apim-dev-portal with the following variables: ...