Discover and Secure your APIs in Minutes
summary
Live demo shows Hipster Shop deployed in staging and prod, a CLI calling Volterra public APIs discovers service-to-service paths (client, server, method, URL) and converts them to layer 7 whitelist policies that the config server pushes to node proxies. Pipeline uses detection and learning engines, Prometheus metrics and Elasticsearch logs; enforcing the generated policies returns 403 for previously allowed flows. Discovery runs from staging and policies apply to production within minutes.
AI-written summary · about
chapters (13)
- 0:00Introduction
- 1:36What is Security
- 2:44Why Secure APIs
- 4:39Challenges
- 6:48Securing APIs
- 11:09Learning Engine
- 12:18Policy Enforcement
- 13:22Use Cases
- 14:49Demo Topology
- 16:23Demo Graph
- 17:30Demo Application
- 24:16QA
- 26:31Security
related talks
47mSecure and observe your APIs no matter where they run
45mAPI Security: Acting Now to Enable Security Controls
54mProtecting API Workloads Against OWASP and Programming Language CVE's
36mSecurity Automation In A Devops World
18mLet Devs Be Devs Without Sacrificing Security
41mFrom Chaos to Order: How to Konnect, secure and observe [...]
35mObserve your API with an API Gateway Plugin
26mProtect the Pipe! A Policy-based Approach for Securing CI/CD Pipe...