Why Google Solutions Products Pricing Getting Started Docs Docs English Sign in Apigee Get Started Guides Reference Support Resources Apigee API hub Contact Us Get started for free Apigee Guides ACCESS APIGEE Overview Using the UI Using the API Using gcloud DEVELOP Building API proxies Adding features to a programmable API proxy Using policies Securing an API proxy Security overview OAuth2 API keys Using Google authentication Using SAML policies in an API proxy Content-based security Masking and hiding data Last-mile security Limit request traffic Caching and persistence Shaping, accessing, and converting messages Accessing configuration data Incorporating procedural code Adding CORS support Enabling distributed tracing Using GraphQL Streaming requests and responses Using WebSockets Creating Java callouts Integrating with Contact Center AI Deploying API proxies Deploying archives Debugging programmable proxies Performing health checks Audit logging DEVELOP (LOCAL) Overview of local development with Apigee Getting started Developing using Apigee in VS Code PUBLISH Publishing overview Managing API products Managing developers and apps Developer portal solutions API design overview Building your integrated portal Building your portal using Drupal MONETIZE Overview of Apigee monetization Steps to use Apigee monetization Enabling Apigee monetization Enforcing monetization limits in API proxies Enforcing monetization quotas in API products Managing prepaid account balances Managing rate plans for API products Integrating monetization in Drupal portal Purchasing API product subscriptions using API Debugging monetization using the Debug tool Generating monetization reports ADMINISTER Users, roles, and access Network Configuration Security administration Managing data collectors Backups ANALYZE Analytics overview Dashboards Custom reports Collecting custom data with the DataCapture policy Exporting data from analytics Using the API Troubleshooting APIGEE INTEGRATION What is Apigee Integration? Get started with Apigee Integration Tutorials Integration Concepts How-to guides Apigee Integration policies Manage Access and Security Analytics and Troubleshooting Reference CONNECTORS What are Connectors? Get started with Connectors Understand Connector Concepts How-to guides Manage Access and Security Troubleshooting Reference API MONITORING API Monitoring overview Using the Timeline view Using the Investigate view Using the Recent view Setting up alerts and notifications Examples of alerts Fault codes ADVANCED API OPERATIONS Advanced API Operations overview Anomaly detection ENVOY ADAPTER v2.0.x v1.4.x v1.3.x v1.2.x v1.1.x v1.0.x Release notes HYBRID RUNTIME All versions Supported platforms Kubernetes and custom resources used by Apigee v1.6 v1.5 v1.4 v1.3 v1.2 v1.1 Release notes TROUBLESHOOTING Introduction to antipatterns Introduction to Apigee playbooks Introduction to policy playbooks Apigee Documentation Guides Was this helpful? Send feedback Securing a proxy On this page OAuth home Using SAML policies Data-masking and hiding Last-mile security API keys Content-based security Key Value Maps and property sets You're viewing Apigee X documentation. View Apigee Edge documentation. API security involves controlling access to your APIs, guarding against malicious message content, accessing and masking sensitive encrypted data at runtime, protecting your backend services against direct access, and other important safeguards. OAuth home Get links to introductory topics, examples, and how-to topics. Using SAML policies Get an overview of Apigee's support for SAML, along with a pointer to the policy you'll need. Data-masking and hiding Learn how to mask sensitive data such as credit card numbers or health information. Last-mile security Learn how to protect yourself against threats to your backend resources. API keys Get an introduction to the working of API keys, the simplest form of app-based security. Content-based security Learn about the Apigee policies you can use to protect your APIs against content-carried threats. Key Value Maps and property sets Store data that shouldn't be hard-coded in your API proxy logic for retrieval at runtime, such as credentials, private keys, or tokens Was this helpful? Send feedback Except as otherwise noted, the content of this page is licensed under the Creative Commons Attribution 4.0 License, and code samples are licensed under the Apache 2.0 License. For details, see the Google Developers Site Policies. Java is a registered trademark of Oracle and/or its affiliates. Last updated 2021-11-19 UTC. Why Google Choosing Google Cloud Trust and security Open cloud Multicloud Global infrastructure Sustainability Customers and case studies Analyst reports Whitepapers Blog Products and pricing Google Cloud pricing Google Workspace pricing Maps Platform pricing See all products Solutions Infrastructure modernization Databases Application modernization Smart analytics Artificial Intelligence Security Productivity & work transformation Industry solutions DevOps solutions Small business solutions See all solutions Resources Google Cloud documentation Google Cloud quickstarts Google Cloud Marketplace Google Workspace Marketplace Learn about cloud computing Support Code samples Tutorials Training Certifications Google Developers Google Cloud for Startups System status Release Notes Engage Contact sales Find a Partner Become a Partner Events Podcast Developer Center Press Corner Google Cloud on YouTube Google Cloud Tech on YouTube Google Workspace on YouTube Follow on Twitter Join User Research We're hiring. Join Google Cloud! Google Cloud Community About Google Privacy Site terms Google Cloud terms Carbon neutral since 2007 Sign up for the Google Cloud newsletter Subscribe English Google uses cookies to deliver its services, to personalize ads, and to analyze traffic. You can adjust your privacy controls anytime in your Google settings. More details OK