All,
Apigee docs state that Apigee does not use a Web Application Firewall but rather is WAF.
Apigee does not leverage Google Cloud Armor or modsecurity or other underneath?
Trigger for the question is RegularExpressionProtection which seems insufficient to provide e.g. sufficient protection against SQL injection.
KR, Guy Crets