Ashish Thorat hi, thanks for bringing this up ))
so about tls 1.3 in azure api management premium tier... right now it's still in preview, according to this blog post https://techcommunity.microsoft.com/blog/integrationsonazureblog/announcing-the-availability-of-tls-1-3-in-azure-api-management-in-preview/4047586. microsoft hasn't given an exact date for general availability yet, but they're working on it https://learn.microsoft.com/en-us/azure/api-management/api-management-howto-manage-protocols-ciphers for updates.
as for why u don't see it in the protocols + ciphers section... well, preview features sometimes roll out bit by bit. if u really need tls 1.3 now, u might wanna try enabling the preview in ur subscription. just keep in mind preview features aren't meant for production workloads, so maybe wait for the stable release if ur dealing with critical stuff.
even if apim doesn't fully support tls 1.3 yet, ur backend services might. u could configure them separately and let apim handle the traffic. worth looking into, no?
while waiting for tls 1.3, make sure ur current tls 1.2 setup is rock solid. disable the older protocols like tls 1.0 and 1.1 if u haven't already. this might help in other tools too, not just apim.
if u wanna get fancy, u can play around with custom policies in apim to tweak security further. microsoft's got some examples here https://learn.microsoft.com/en-us/azure/api-management/api-management-sample-flexible-throttling. not exactly tls related, but hey, security is security ))
let me know if thats help
Alex
and "yes" if you would follow me at Q&A - personaly thx.
P.S. If my answer help to you, please Accept my answer