What must every REST API call to an Azure IoT Central application contain?

Every REST API call to an Azure IoT Central application must include an Authorization header. This header is crucial because it ensures that the request is authenticated and authorized, which is a fundamental aspect of secure communication with Azure IoT Central. The Authorization header typically includes a bearer token that grants access to resources within the IoT Central environment. Without this header, the API cannot verify the identity of the requester, and the call would be rejected.

In REST APIs, authentication is typically managed through various schemes, and Azure IoT Central employs token-based authentication to guarantee that only legitimate requests from authenticated users or applications can access sensitive IoT resources and data. This practice helps maintain the integrity and confidentiality of the interactions between clients and the IoT Central platform.