Building Secure APIs are important but Securing Apigee Edge itself is equally important. There are access tokens, private keys in Apigee.
If the gateway itself is compromised, all else is irrelevant.
Other than regular patch updates and reducing attack surface (such as ports), what are other ways to secure the gateway from an end to end perspective?
What kind of hardening could one further do?
Thank you.
Nathan Aw (Singapore)
LinkedIn
Twitter
