Building better security for your API platform using Azure API Management
summary
Demonstrates concrete APIM fixes: scaffolding an App Service API into Azure API Management, adding Key Vault-backed basic auth and OAuth2 with Azure AD token validation via gateway policies, forcing HTTPS and removing exposed DELETE methods, sanitizing stack traces and stripping a requester field with a few C# policy lines, and enforcing a 1 MB body limit plus a 15 calls/min rate limit to stop brute force or DoS. Claims APIM handles ~80% of common API security controls and shows each demo working live.
AI-written summary · about
chapters (10)
- 0:00Introduction
- 3:13Why API security matters
- 8:34API Management overview
- 11:21API security best practices
- 17:00Demo: Broken authentication
- 23:45Demo: OAuth authentication
- 26:36Demo: Security misconfigurations
- 31:53Demo: Excessive data exposure
- 35:46Demo: Rate limiting
- 38:18Summary and key takeaways
related talks
45mBuilding better security for your API platform using Azure API Mgmt
50mSecuring .NET Apps and Microservices in Azure
52mDemystifying Web API Security in Azure
20mUnlocking the power API Management for developers
01h 02mDemystifying Web API Security in Azure
53mWeb API Security With Azure Active Directory
33mImproving API Security Posture.
21mDesigning Secure APIs in the Cloud