# Authenticating against the Azure Management REST APIs using the Fluent SDK

There’s a nice [fluent sdk](https://docs.microsoft.com/en-us/dotnet/azure/dotnet-sdk-azure-concepts?view=azure-dotnet) by Microsoft to help developers manage their Azure resources through code. To be clear, it’s not infrastructure as code. But, if you have a _need_ where business logic and infrastructure meet, then you might have to provision compute/storage on the fly.

As the docs state, you have to authenticate against the Azure Management API. They have a great helper library to help with this.

    AzureCredentials _azureCredentials = 
      SdkContext.AzureCredentialsFactory.FromFile(Environment.GetEnvironmentVariable("AZURE_AUTH_LOCATION"));
    

This works great for most usecases. To issue commands exposed through the Fluent SDK.

But, what if you want to issue an API call to the Azure Management API to invoke a newer feature?

### Example

We had this need. We wanted to scale out virtual machine scale sets based on demand to a batch system. We were having to use custom decision to determine when to scale out. Very different your typical web application scale out scenario. We also had to _scale in_ when the system had lower demands.

So, we had to use a preview feature. We had to protect a virtual machine that’s part of a scale set from a _scale-down operation_. We didn’t want an active/non-idle instance to be de-provisioned for the batch jobs they were performing.

This functionality was only available through a _protection policy_ at the instance level. We had to issue a [REST API](https://docs.microsoft.com/bs-latn-ba/azure/virtual-machine-scale-sets/virtual-machine-scale-sets-instance-protection) call to the Azure Management API.

    PUT on `/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.Compute/virtualMachineScaleSets/{vmScaleSetName}/virtualMachines/{instance-id}?api-version=2019-03-01`
    

So, to accomplish this through the Azure Fluent SDK, we had to do the following:

    var body = new StringContent(@"
    {
      ""properties"": {
        ""protectionPolicy"": {
          ""protectFromScaleIn"": true
        }
      }        
    }
    ", Encoding.UTF8, "application/json");
    var request = new HttpRequestMessage(HttpMethod.Put, new Uri(
        "https://management.azure.com/subscriptions/{azure.GetCurrentSubscription().SubscriptionId}/resourceGroups/{vmssGroup.ResourceGroupName}/providers/Microsoft.Compute/virtualMachineScaleSets/{vmssGroup.Name}/virtualMachines/{randomMachine.InstanceId}?api-version=2019-03-01"))
    {
        Content = body
    };
    //Add authorization header
    await _azureCredentials.ProcessHttpRequestAsync(request, CancellationToken.None);
    var protectionResponse =  await httpClient.SendAsync(request, CancellationToken.None);
    

Besides building a normal HTTP request and sending it through an `HttpClient`, we had to add an `Authorization` header to the http request.

It took some perusing through the open source repo for the fluent SDK, but ultimately it came down to this line:

`await _azureCredentials.ProcessHttpRequestAsync(request, CancellationToken.None);`

The main `AzureCredentials` class used to authenticate with the fluent SDK has a method to decorate an `HttpRequest` object with the proper headers.

That’s it!