The AI Hub Gateway Landing Zone is a solution accelerator that provides a set of guidelines and best practices for implementing a central AI API gateway to empower various line-of-business units in an organization to leverage Azure AI services.
NEW HOME: AI Hub Gateway Solution Accelerator
AI Hub Gateway is moving to Azure-Samples organization. Please visit the new home for the latest updates and contributions.
AI Hub Gateway Solution Accelerator
The V2 version of the solution accelerator provides a more comprehensive and robust solution for implementing a central AI API gateway to empower various line-of-business units in an organization to leverage Azure AI services.
The AI Hub Gateway Landing Zone architecture designed to be a central hub for AI services, providing a single point of entry for AI services, and enabling the organization to manage and govern AI services in a consistent manner.
NOTE: The V2 version is still work in progress and I'm working on adding more features and capabilities to the solution accelerator.
The AI Hub Gateway Landing Zone provides the following features:
- Centralized AI API Gateway: A central hub for AI services, providing a single point of entry for AI services that can be shared among multiple use-cases in a secure and governed approach.
- Seamless integration with Azure AI services: Ability to just update endpoints and keys in existing apps to switch to use AI Hub Gateway.
- AI routing and orchestration: The AI Hub Gateway Landing Zone provides a mechanism to route and orchestrate AI services, based on priority and target model enabling the organization to manage and govern AI services in a consistent manner.
- Granular access control: The AI Hub Gateway Landing Zone does not use master keys to access AI services, instead, it uses managed identities to access AI services while consumers can use gateway keys.
- Private connectivity: The AI Hub Gateway Landing Zone is designed to be deployed in a private network, and it uses private endpoints to access AI services.
- Capacity management: The AI Hub Gateway Landing Zone provides a mechanism to manage capacity based on requests and tokens.
- Usage & charge-back: The AI Hub Gateway Landing Zone provides a mechanism to track usage and charge-back to the respective business units with flexible integration with existing charge-back & data platforms.
- Resilient and scalable: The AI Hub Gateway Landing Zone is designed to be resilient and scalable, and it uses Azure API Management with its zonal redundancy and regional gateways which provides a scalable and resilient solution.
- Full observability: The AI Hub Gateway Landing Zone provides full observability with Azure Monitor, Application Insights, and Log Analytics with detailed insights into performance, usage, and errors.
- Hybrid support: The AI Hub Gateway Landing Zone approach the deployment of backends and gateway on Azure, on-premises or other clouds.
This solution accelerator provides a one-click deploy option to deploy the AI Hub Gateway Landing Zone in your Azure subscription through Azure Developer CLI (azd) or Bicep (IaC).
The one-click deploy option will deploy the following components in your Azure subscription:
- Azure API Management: Azure API Management is a fully managed service that powers most of the GenAI gateway capabilities.
- Application Insights: Application Insights is an extensible Application Performance Management (APM) service that will provides critical insights on the gateway operational performance. It will also include a dashboard for the key metrics.
- Event Hub: Event Hub is a fully managed, real-time data ingestion service that’s simple, trusted, and scalable and it is used to stream usage and charge-back data to target data and charge back platforms.
- Azure OpenAI: 3 instances of Azure OpenAI across 3 regions. Azure OpenAI is a cloud deployment of cutting edge generative models from OpenAI (like ChatGPT, DALL.E and more).
- Cosmos DB: Azure Cosmos DB is a fully managed NoSQL database for storing usage and charge-back data.
- Azure Stream Analytics: Azure Stream Analytics is a fully managed real-time event processing service that will be used to process the usage and charge-back data from Event Hub and push it to Cosmos DB.
- User Managed Identity: A user managed identity to be used by the Azure API Management to access the Azure OpenAI services/Event Hub and another for Azure Stream Analytics to access Event Hub and Cosmos DB.
In order to deploy and run this solution accelerator, you'll need
- Azure Account - If you're new to Azure, get an Azure account for free and you'll get some free Azure credits to get started.
- Azure subscription with access enabled for the Azure OpenAI service - You can request access. You can also visit the Cognitive Search docs to get some free Azure credits to get you started.
- Azure account permissions - Your Azure Account must have
Microsoft.Authorization/roleAssignments/writepermissions, such as User Access Administrator or Owner.
For local development, you'll need:
- Azure CLI - The Azure CLI is a command-line tool that provides a great experience for managing Azure resources. You can install the Azure CLI on your local machine by following the instructions here.
- Azure Developer CLI (azd) - The Azure Developer CLI is a command-line tool that provides a great experience for deploying Azure resources. You can install the Azure Developer CLI on your local machine by following the instructions here
- VS Code - Visual Studio Code is a lightweight but powerful source code editor which runs on your desktop and is available for Windows, macOS, and Linux. You can install Visual Studio Code on your local machine by following the instructions here
It is recommended to check first the [main.bicep] file that includes the deployment configuration and parameters.
Make sure you have enough OpenAI capacity for gpt-35-turbo and embedding in the selected regions.
Currently these are the default values:
// You can add more OpenAI instances by adding more objects to the openAiInstances object
// Then update the apim policy xml to include the new instances
@description('Object containing OpenAI instances. You can add more instances by adding more objects to this parameter.')
param openAiInstances object = {
openAi1: {
name: 'openai1'
location: 'eastus'
}
openAi2: {
name: 'openai2'
location: 'northcentralus'
}
openAi3: {
name: 'openai3'
location: 'eastus2'
}
}When you are happy with the configuration, you can deploy the solution using the following command:
# Use --tenant-id if you have multiple tenants with login
azd auth login
# Setup new environment
azd env new ai-hug-gateway-dev
# Deploy the solution accelerator
azd upOnce the deployments complete, you can head to Azure Stream Analytics and start the job to process the data from Event Hub to Cosmos DB.
# Start the Stream Analytics job
az stream-analytics job start --name "REPLACE" --resource-group "REPLACE"
After that, you can start using the AI Hub Gateway Landing Zone through the Azure API Management on Azure Portal:
NOTE: You can use Azure Cloud Shell to run the above command, just clone this repository and run the command from the repo root folder.
To dive deeper into the AI Hub Gateway technical mechanics, you can check out the following guides:
