Shield your backend from outside attacks with API Managers
summary
API Management platforms centralize security rules and add an API Gateway layer that enforces three preauthorization levels: API key (who you are), API proxies (which locations/resources you may access), and API-level checks (which actions you can perform). Combine that with a WAF, identity provider, observability and outbound quotas to enforce rate limits, spike arrest and quotas, payload schema/JSON‑XML validation, redirect allowlists and timeouts. The onion layering reduces incidents and prevents runaway third‑party billing.
AI-written summary · about
chapters (6)
- 0:00Introduction and context
- 0:59The problem with APIs
- 2:45Defense in depth strategy
- 5:53API management platforms
- 18:18Practical implementation
- 38:18Questions and answers
related talks
48mShield your backend from outside attacks with API Managers
33mImproving API Security Posture.
28mAPI Gateway: critical component of your digital architecture
53mSecuring different types of Web APIs
45mBuilding better security for your API platform using Azure API Mgmt
27mLatest Trends in API Management in 2019
16mAPI Security Challenges and How to Address Them
22mLayered Approach of API Security Strategies and its Business Impact