You are building a public API whose backend is hosted in an Azure App Service and exposes a REST API. You must configure backend authentication for an API Management instance. Solution: configure client certificate gateway credentials for the HTTP(s) endpoint. Does this solution achieve the requirement?

Yes, configuring client certificate gateway credentials for the HTTP(s) endpoint is a valid solution for backend authentication in Azure API Management. This method ensures that API Management presents a client certificate to the backend App Service, which can then validate the certificate to authenticate the request. This provides a secure, mutual TLS (mTLS) authentication mechanism between API Management and your backend API. Other methods like shared secret or managed identity could also work, but client certificates are a strong and common choice for this scenario.