/

Console

• English
• Deutsch
• Español – América Latina
• Français
• Português – Brasil
• 中文 – 简体
• 日本語
• 한국어

Sign in

• Apigee

Start free

Advanced API Security for multiple Apigee organizations and gateways

Apigee Advanced API Security is available as an additional add-on for your API hub instance to help you manage and govern the security posture of your APIs across multiple Apigee organizations, environments, and gateways. Leveraging API hub's plugins and curation capabilities, Advanced API Security offers an unified view that lets you monitor risks, compare configurations, and ensure consistent security standards across your entire API ecosystem.

Key capabilities

Advanced API Security offers the following capabilities when you enable it for your API hub instance:

• Risk assessment across multiple Apigee organizations, environments, and gateways: assess the security scores for a specific API or for all APIs across all of its deployments in multiple Apigee organizations, environments, and gateways to get a comprehensive understanding of its risk profile.
  • To learn about viewing security scores across multiple Apigee organizations, environments, and gateways, see View security scores across multiple Apigee organizations and gateways.
  • To learn about viewing security scores for a specific API across its deployments, see View security scores for APIs.
• Security profiles: create and manage custom security profiles based on your organization's needs, and apply them consistently across your multiple Apigee environments, organizations, and gateways.
  • To learn about creating and managing security profiles for multiple Apigee organizations and gateways, see Manage security profiles for multiple Apigee organizations and gateways.
• Monitoring conditions and alerts: track and analyze the security posture of your API deployments over time, using Cloud Monitoring. Add alerts to notify you when the security posture changes.
  • To learn about managing security monitoring conditions and alerts, see Manage monitoring conditions for multiple Apigee organizations and gateways.

Enable Advanced API Security for your API hub instance

To enable and configure Advanced API Security for your API hub instance, see Configure Advanced API Security for multiple Apigee organizations and gateways.

IAM roles and permissions

To use Advanced API Security, you must have the following IAM roles and permissions:

To configure and use security monitoring conditions and alerts in Cloud Monitoring:

For information about granting IAM roles, see Grant or revoke multiple IAM roles using the Google Cloud console.

What's next

• To enable Advanced API Security for your API hub instance, see Configure Advanced API Security for multiple Apigee organizations and gateways.
• To view security scores across multiple Apigee organizations and gateways, see View security scores across multiple Apigee organizations and gateways.
• To view security scores for a given API across its deployments in gateways, see View security scores for APIs.
• To manage security profiles across multiple Apigee organizations and gateways, see Manage security profiles for multiple Apigee organizations and gateways.
• To learn enabling Apigee Advanced API Security from your Apigee X/hybrid instance, see Apigee Advanced API Security.