API Observability through an API System of Record with Rob Dickinson I Postman

#technology #breakingchanges #postman #resurface #api #graphql #podcast #security #observability

Resurface is an API system of record that removes the guesswork from discovering how APIs are being used and attacked. Resurface turns every API call into an observable transaction so customers can capture, store, and explore every REST and GraphQL call in order to easily investigate failures, identify threats, and improve performance.

In this episode of Breaking Changes, Postman Chief Evangelist Kin Lane welcomes Resurface Labs Co-founder and CTO Rob Dickinson to discuss how an API system of record can change the way organizations think about securing, optimizing, and managing their APIs. Rob explains how Resurface Labs helps companies undergoing digital transformations by providing observability tools for APIs, especially those being exposed to external parties. Together, they explore the evolving landscape of API boundaries and their impact on business, technology, and politics.

We will dive into key questions like:

How does an API system of record differ from modern approaches to traceability?
What is OWASP, and why does it matter?
How do you help your teams be better at security?
How can companies brace for future API security threats?
What does the future hold for API security?

Episode Timestamps
00:00 - Introduction
01:07 - Observability Around APIs
06:37 - Understanding API Traffic
10:59 - Observability and Traceability
14:37 - API Security and Awareness.
18:35 - Conducting Business in a Dangerous World
22:09 - API Security and Observability
27:35 - API Management and Security
29:23 - Partnerships with Crafty Hackers
33:20 - Observability and DevOps Shift.
38:26 - API Education and Awareness.
42:08 - First Party Solution
49:39 - Customer Care and DevOps Merging
50:33 - Shift in Thinking About Security
55:30 - Staying Informed and Finding Experts
01:00:27 - Observability at the API Layer.