Hi All,
I'm about to implement Apigee X for our client. There is a requirement to apply message-level (payload) encryption, where the API consumer/client will encrypt the payload before it sends to proxy HTTPS endpoints in Apigee. We're still in discussion whether to use PGP encryption type. It is also expected that after the message is decrypted in the proxy level, then it should be encrypted again when it sends to the target endpoint (which may require different encryption type PGP/AES/etc).
- What is the practice to implement encryption/decryption in Apigee X? Shall we go with Java callout policy?
- Is there any other better design approach for this?
Thank you
LinkedIn
Twitter
