I have read a lot of documentation about configuring apigee's proxies and it seems there are not many options to secure your backend endpoint (which is behind the proxy)
- with white-list policy - in that way backend endpoint will accept requests only from apigee proxy and deny everything else;
- two-way TLS as described here
Which one is a best practice? Is there any other way to secure backend endpoint? Please, share your experience and, if possible, point me to some resources I can read about security measures you have applied.
LinkedIn
Twitter
