resource "azurerm_api_management" "example" {
                  ...
 +                virtual_network_configuration {
                    subnet_id = azure_subnet.subnet_not_public_ip.id 
                  }
                  ....
                }