Enhance API security with Apigee and Cloud Armor

APIs are great tools since they provide developers a simplified way to consume data and functionality that resides in backend systems. However, they are targets for malicious attacks because they contain business-critical information. In this video, we demo how Google Cloud can help you better secure your APIs with Apigee and Cloud Armor. Watch to learn how these tools offer security at multiple levels for your APIs!

Chapters:
0:00 - Intro
0:47 - Apigee + Cloud Armor
1:20 - Apigee + Cloud Armor demo
3:29 - Conclusion

product: Apigee, Cloud Armor; fullname: Bukola Ayodele;

[NejmeddineBenOuarred]

Very interesting video with a very simple but relevant demo

[alexpalau]

Great video showing the different levels of security for ApiGee and Cloud Armor and the respective errors the produce

[anuonemola]

lol Tell me why I was browsing this channel for an upcoming interview and I see Bukola! (She has a YouTube Channel: The Come Up) I am pleasantly surprised and now educated. You go sis!

[KevinBoutin]

Great demo. I'm wondering what the key differences are between GCP's new API Gateway and Apigee. They seem almost identical.

[StefanAstrand]

It should be mentioned that Apigee costs minimum 1500 USD per month. I was playing around with this for my web project and got a nasty bill at the end of the month. I think this should be clear when you press "pay-as-you-go".

[JK-hfzk]

Talking about App Armor, is there any future plan to filter the incoming requests by validating the keys right there without passing the request further? I mean, just checking if the header is there is not enough. There might exist a check against some sort of memory store where the valid keys would be stored. Apigee Standard plan, for instance, allows for 180 million calls a YEAR which can be easily depleted within few DDoS attacks, right? Or, the unsuccessful (unauthorized) calls don't count in Apigee?