Operationalizing API Management at Scale on India’s Enterprise Frontlines
summary
Field deployments with 25+ enterprises in finance, banking and telecom use Kong gateway to implement mTLS + KMS so chatbot tokens cannot read Salesforce data, and a custom flow injects username into headers to apply rate limiting by source and by user header which blocks OTP brute force and token abuse. Observability uses OpenTelemetry at gateway and an API-metrics dashboard that surfaces ~25% invalid traffic and shortens incident resolution.
AI-written summary · about
chapters (7)
- 0:00Introduction
- 1:29Helmet analogy for API security
- 3:15Salesforce chatbot security
- 5:54Password reset API security
- 10:14API observability and monitoring
- 14:32API metrics and governance
- 15:34Conclusion
related talks
41mFrom Chaos to Order: How to Konnect, secure and observe [...]
45mAPI Security: Acting Now to Enable Security Controls
48mAPI Security for Enterprises fireside chat
39mAPI Security: Acting Now to Enable Security Controls
29mOpportunities and Risk in API Management
45mRun, Secure, and Govern Your AI Traffic with an AI Gateway for Multi-LLM
36m10 Things You Hate About Your API Gateway
31mArchitecting Secure Agentic Workflows on Kubernetes: A Financial Sector…