API Lifecycle Management
summary
Claims that nearly half of companies cannot detect API attacks and half dont know what's exposed, then shows how to fix it with concrete automation: use Akana-style life cycle manager for approvals, a life cycle coordinator to perform sideband promotions across dev test staging without network links, and a repository with extensible metadata driving CI/CD. Demonstrates automated policy enforcement (OWASP top 10, injection detection), audited signoffs, and environment-specific key/policy application so promotions happen automatically after approvals rather than by error-prone manual scripts.
AI-written summary · about
chapters (13)
- 0:00API lifecycle security challenges
- 1:03API lifecycle security importance
- 2:51How APIs bypass security
- 4:38Undetected API vulnerabilities risks
- 7:53API lifecycle management principles
- 10:41Lifecycle automation components
- 13:09API development approval workflows
- 15:13Secure environment transitions automation
- 17:44API management architecture
- 20:09Automated security policy enforcement
- 21:14Lifecycle promotion demo
- 22:41Metadata-driven API governance
- 25:09Next steps and resources
related talks
24mAPI Security in DevSecOps: Built-In, Not Bolted On
16mApisecure, 14 & 15 March 2023 - Meenakshi Kaushik, Leader - Product Management at Cisco.
39mAPI Security: Acting Now to Enable Security Controls
31mAPI security
48mThe Need for Automation in API Security
49mApisecure, 14 & 15 March 2023 - Sudhir Chepeni, Director Products and Technology at Akamai.
48mAPI Security for Enterprises fireside chat
17mAPI Security Simplified: Practical Tips & Tools