API Security on Google Cloud's Apigee API Platform

The API Security on Google Cloud's Apigee API Platform, is the second in a series of three courses in the Developing APIs for Google Cloud's Apigee API Platform specialization. The first course introduces you to API design and the fundamentals of the Apigee platform. This course focuses on API security. The third course focuses on additional API development topics.

This course will cover topics such as how to secure APIs, the security concerns you will encounter for your APIs, OAuth, the primary authorization method for REST APIs, JSON Web Tokens (JWTs) and federated security. This course will also discuss securing against malicious requests, safely sending requests across a public network, and how to secure data for users of Apigee. The course utilizes hands-on labs that model an API development process that can be used for real-world projects on Google Cloud's Apigee API platform.

• Develop a comprehensive understanding of API security concerns, including the importance of identity, authentication, and authorization in securing APIs on the Google Cloud's Apigee API Platform.
• Explore OAuth authentication protocols, including the OAuth Client Credentials Grant, OAuth Password Grant, and OAuth Authorization Code Grant, to effectively manage access to APIs.
• Gain practical knowledge and hands-on experience in implementing OAuth protocols through labs and exercises, focusing on various grant types and their applications in securing API endpoints.
• Learn about key security mechanisms such as JWT, JWS, SAML, and OpenID Connect, and understand their roles in ensuring secure API communication and data exchange.
• Acquire essential skills in enhancing content, transport, and internal security of APIs, including protecting against content-based attacks, implementing transport security measures, and securing Apigee management interfaces through threat protection and data masking techniques.