Does Your Web API Pass the Technical Inspection?
summary
An 80-point operational checklist for web APIs covering SLOs, security, governance, monitoring and versioning. It names concrete tools and patterns: IDM/gateway integration, canary and replay testing that diffs responses, semver and Stripe-style migration-based versioning that rewrites requests/responses, pagination and rate limits to prevent scale failures, and immutable storage with auditing for troubleshooting; an example SLO is 95% of render requests under 400 ms.
AI-written summary · about
chapters (12)
- 0:00Opening credits
- 0:15Background
- 3:38The technical inspection
- 6:34Defining your objectives
- 9:55Identifying risks
- 16:37Perimeter-based security
- 19:03Managing evolution over time
- 22:14Reverse engineering
- 24:40Compatibility
- 27:51Pagination
- 30:18Logic
- 37:14Conclusion
related talks
08mAPI Security Risks
25m10 steps to secure your API
24mAPI Security in DevSecOps: Built-In, Not Bolted On
25mAPI Security Deep Dive: Safeguard Your Digital Assets
17mAPI Security Simplified: Practical Tips & Tools
01h 29mAPI Vulnerabilities and What to Do About Them
29mDefence in depth
39mThe API Assessment Primer