⛳️ Does Your Web API Pass the 60-Point Safety Check?
summary
A checklist-style presentation listing over 30 often-overlooked areas for production web APIs, covering organizational and governance issues, business constraints and operability (SLA, SLO, SLI), release management, query methods, security, performance and scaling, testing, documentation, versioning and changelogs, and monitoring. Recommendations and attention points are illustrated with lessons learned from tech leaders (Uber, Stripe, Facebook, Google) and from French companies ranging from startups to SMEs.
AI-written summary · about
chapters (15)
- 0:00Introduction
- 1:30API goals and principles
- 5:00Defining API objectives
- 6:50Resource naming and consistency
- 7:53Authentication and IAM
- 10:18Perimeter security vs zero trust
- 12:25API versioning
- 14:11Advanced versioning strategy
- 16:36Pagination and time limits
- 18:41Multi-tenant management
- 21:51Public and private environments
- 23:34Performance testing and quotas
- 24:57Automated tests and monitoring
- 27:46Alerting and runbooks
- 28:50Deployment strategies
related talks
08mAPI Security Risks
01h 29mAPI Vulnerabilities and What to Do About Them
24mAPI Security in DevSecOps: Built-In, Not Bolted On
33mWhy Developers Struggle with API Security
17mAPI Security Simplified: Practical Tips & Tools
52mTop 10 Rest API Design Pitfalls
29mDefence in depth
25mAPI Security Deep Dive: Safeguard Your Digital Assets