We may earn an affiliate commission when you visit our partners.

Securing APIs with Apigee X

This is a self-paced lab that takes place in the Google Cloud console. In this lab, you modify an API to require OAuth tokens for access. You use the SpikeArrest policy to limit the rate of API calls by application, and you use private variables and data masking to hide sensitive data from users who debug API traffic.

Enroll now

Or subscribe to Coursera Plus

And get unlimited access to Coursera

Two deals to help you save

Save money when you learn. Here are two deals and offers that may be relevant to this course.

All coupon codes, vouchers, and discounts are applied automatically unless otherwise noted.

Valid until July 14

Coursera Plus Annual

Work toward what's next for your career with access to 10,000+ programs. Discover emerging skills and save.

Valid until August 30

Google AI App Builder

Learn how to use Gemini API and API Studio with a three-course series from Google DeepMind

What's inside

Syllabus

Traffic lights

Read about what's good

what should give you pause

and possible dealbreakers

Explores securing APIs using a variety of techniques and tools, such as authentication, authorization, rate limiting, and data masking

Taught by Google Cloud Training, who are recognized for their work in cloud computing

Teaches skills that are highly relevant to industry, such as API security and data protection

Provides hands-on labs and interactive materials, which can help learners apply the concepts they learn

Can help learners develop professional skills in API security and data protection

Suitable for learners with some experience in cloud computing and API development

Save this course

Create your own learning path. Save this course to your list so you can find it easily later.

Save

Reviews summary

Practical apigee x api security lab

According to students, this self-paced lab on Securing APIs with Apigee X offers a largely positive experience, particularly for those with existing API or security knowledge. Learners highlight its hands-on, practical approach, finding the exercises on OAuth tokens, SpikeArrest policy, and data masking directly applicable. Many appreciate the clear instructions and the functional lab environment, making it excellent for reinforcing concepts. However, some reviewers note that the course assumes prior knowledge of Apigee or API security, making it a challenging experience for true beginners who may find the explanations minimal and the pace too fast. It's perceived more as a guided exercise than a comprehensive theoretical module.

Efficient, self-contained lab format for focused learning.

"I found the self-paced lab format effective."

"Very focused and to the point. This lab delivered exactly what it promised."

"Perfect for reinforcing concepts learned elsewhere or for a quick dive into Apigee security."

Effectively teaches implementation of OAuth, SpikeArrest, and data masking.

"The hands-on experience with OAuth tokens and SpikeArrest was practical and directly applicable to my work. The data masking section was also very clear."

"The content on rate limiting and protecting sensitive data was well-covered."

"The sections on SpikeArrest and data masking were particularly useful."

"The policy configurations were well-explained and demonstrated."

Provides valuable hands-on practice with key Apigee X security features.

"This lab was incredibly helpful for understanding Apigee X security policies. The hands-on experience with OAuth tokens and SpikeArrest was practical and directly applicable to my work."

"Excellent practical lab! It clearly demonstrated how to implement Apigee X security features."

"Good hands-on lab. The sections on SpikeArrest and data masking were particularly useful."

"Very focused and to the point. This lab delivered exactly what it promised: securing APIs with Apigee X using practical examples."

The lab prioritizes practical steps over comprehensive theoretical explanations.

"I felt it moved a bit too fast on certain concepts without much explanation."

"It's more of a guided exercise than a comprehensive learning module."

"I struggled with this lab. The explanations were minimal..."

Learners new to Apigee or API security may find the course challenging.

"If you're completely new to Apigee or API security, you might struggle. It's more of a guided exercise than a comprehensive learning module."

"I struggled with this lab. The explanations were minimal, and I had to spend a lot of time searching external documentation to understand *why* I was doing certain steps."

"It assumes some prior knowledge of APIs and general security concepts, so come prepared."

"A bit more theoretical background on OAuth flows would have been useful for true beginners."

Activities

Be better prepared before your course. Deepen your understanding during and after it. Supplement your coursework and achieve mastery of the topics covered in Securing APIs with Apigee X with these activities:

Review basic principles of API security

Show steps

Review the fundamental concepts of API security to refresh your knowledge and strengthen your understanding for this course.

Browse courses on API Security

Show steps

Read through documentation on API security best practices
Summarize key concepts and techniques for securing APIs
Identify common API security threats and vulnerabilities

Review basic Linux commands related to API development

Show steps

Ensure you have a strong foundation in basic Linux commands for effective API development.

Browse courses on Linux

Show steps

List common Linux commands used in API development
Practice using these commands in a terminal

Compile notes and course materials

Show steps

Cataloging and reviewing the important details of the course will help strengthen your understanding of the core concepts.

Show steps

Gather all notes, assignments, quizzes, and exams
Organize and label materials by topic
Review and summarize key points

15 other activities

Expand to see all activities and additional details

Show all 18 activities

Learn about API security with GCP Knowledge Center

Show steps

Acquire the essential knowledge on securing APIs in GCP.

Browse courses on API Security

Show steps

Explore the GCP Knowledge Center
Read the section on API Security

Mask Sensitive Data

Show steps

Protect sensitive data by implementing data masking techniques.

Browse courses on Data Masking

Show steps

Identify the data that needs to be masked.
Choose a data masking technique.
Implement the data masking technique.
Test the data masking technique to ensure it is working correctly.

Follow a tutorial on API security best practices

Show steps

Explore best practices for securing APIs by following a guided tutorial, reinforcing your understanding of essential security considerations.

Browse courses on API Security

Show steps

Find a reputable tutorial on API security best practices
Follow the steps outlined in the tutorial
Apply the best practices to your own API projects

Configure OAuth Tokens for API Access

Show steps

Gain hands-on experience with configuring OAuth tokens for API access.

Show steps

Set up a project in Google Cloud.
Create an API.
Enable OAuth tokens for the API.
Test the API using OAuth tokens.

Follow Google Cloud Tutorials

Show steps

Practice the concepts covered in the course by following guided tutorials on Google Cloud.

Show steps

Visit the Google Cloud Tutorials website.
Choose a tutorial on a topic related to the course.
Follow the tutorial step-by-step.
Test your understanding by completing the exercises.

Solve a practice problem from Geeksforgeeks

Show steps

Gain proficiency in implementing security features for APIs.

Browse courses on REST API

Show steps

Select a problem tagged with REST API, OAuth, or Rate Limiting
Use the provided test cases to test your solution

Write unit tests for a small API application

Show steps

Gain proficiency in writing unit tests to ensure the reliability of your API.

Browse courses on APIs

Show steps

Create a simple API application
Write unit tests for each endpoint in your API
Run the unit tests to verify their effectiveness

Practice using OAuth tokens

Show steps

Practice using OAuth tokens to authenticate API requests, improving your understanding of API security mechanisms.

Browse courses on OAuth

Show steps

Create an OAuth client
Obtain an access token
Use the access token to make API requests

Attend an online workshop on API security best practices

Show steps

Gain valuable insights and best practices from industry experts.

Browse courses on API Security

Show steps

Search for reputable online workshops on API security
Register for a workshop that fits your schedule and learning needs
Attend the workshop and actively participate in discussions

Apply the SpikeArrest policy

Show steps

Experiment with the SpikeArrest policy to limit the rate of API calls, enhancing your knowledge of API rate management techniques.

Show steps

Create a SpikeArrest policy
Configure the policy settings
Attach the policy to an API

Implement SpikeArrest Policy

Show steps

Put your understanding of the SpikeArrest policy into practice by implementing it in a real-world application.

Show steps

Choose an application that requires rate limiting.
Implement the SpikeArrest policy in the application.
Test the application to ensure the policy is working correctly.

Use private variables and data masking

Show steps

Implement private variables and data masking techniques to protect sensitive information in API responses, solidifying your understanding of data security practices.

Show steps

Create private variables in your API code
Configure data masking rules
Test the effectiveness of your data security measures

Write a blog post about SpikeArrest policy

Show steps

Explain the SpikeArrest policy to consolidate your understanding and share your insights with the community.

Browse courses on API Gateway

Show steps

Research how SpikeArrest works
Explain the benefits and limitations of SpikeArrest
Share your own use case or example of how you used SpikeArrest

Develop a sample API security policy for a hypothetical application

Show steps

Create a tangible artifact that demonstrates your understanding of API security best practices.

Browse courses on API Security

Show steps

Research and identify industry best practices for API security
Design and write a sample API security policy based on your research
Share your policy with peers or mentors for feedback

Contribute to open-source projects related to API security

Show steps

Contribute to real-world projects while improving your skills and knowledge.

Browse courses on Open Source

Show steps

Identify open-source projects related to API security
Choose a project that aligns with your interests and skills
Contribute to the project by fixing bugs, adding features, or improving documentation

Career center

Learners who complete Securing APIs with Apigee X will develop knowledge and skills that may be useful to these careers:

Cloud Security Engineer

Cloud Security Engineers plan, implement, and maintain the security of cloud computing systems and applications. They protect data from unauthorized access, breaches, and other threats. This course may be useful to Cloud Security Engineers who want to learn how to use Apigee X to secure APIs, and to protect sensitive data from users who debug API traffic.

See salaries and explore the career path for Cloud Security Engineer

Security Engineer

Security Engineers design, implement, and maintain security systems and networks. They protect systems from unauthorized access, breaches, and other threats. This course may be useful to Security Engineers who want to learn how to use Apigee X to secure APIs, and to protect networks and data from unauthorized access.

See salaries and explore the career path for Security Engineer

Security Architect

Security Architects design and implement security solutions for organizations. They work with business leaders and IT staff to identify security risks and develop strategies to mitigate them. This course may be useful to Security Architects who want to learn how to use Apigee X to secure APIs, and to protect organizations from unauthorized access and data breaches.

See salaries and explore the career path for Security Architect

Security Consultant

Security Consultants help organizations to improve their security posture. They assess security risks, develop security plans, and implement security measures. This course may be useful to Security Consultants who want to learn how to use Apigee X to secure APIs, and to help organizations protect their data from unauthorized access and breaches.

See salaries and explore the career path for Security Consultant

Information Security Analyst

Information Security Analysts protect computer systems and networks from unauthorized access, breaches, and other threats. They develop and implement security policies, and they monitor systems for suspicious activity. This course may be useful to Information Security Analysts who want to learn how to use Apigee X to secure APIs, and to protect sensitive data from unauthorized access.

See salaries and explore the career path for Information Security Analyst

Web Developer

Web Developers design, develop, and maintain websites. They work with businesses to understand their needs and develop websites that meet those needs. This course may be useful to Web Developers who want to learn how to use Apigee X to secure APIs, and to protect data from unauthorized access.

See salaries and explore the career path for Web Developer

Data Scientist

Data Scientists use data to solve business problems and make predictions. They collect, clean, and analyze data, and then develop models that can be used to predict future events. This course may be useful to Data Scientists who want to learn how to use Apigee X to protect the data that they use for their models, and to prevent unauthorized access to their models.

See salaries and explore the career path for Data Scientist

DevOps Engineer

DevOps Engineers work with developers and operations teams to ensure that software is delivered quickly and securely. They automate the software development and deployment process, and they monitor the performance of applications in production. This course may be useful to DevOps Engineers who want to learn how to use Apigee X to secure APIs, and to automate the deployment of security updates.

See salaries and explore the career path for DevOps Engineer

Network Engineer

Network Engineers design, build, and maintain computer networks. They ensure that networks are reliable, secure, and efficient. This course may be useful to Network Engineers who want to learn how to use Apigee X to secure APIs, and to protect networks from unauthorized access.

See salaries and explore the career path for Network Engineer

Software Developer

Software Developers design, develop, and maintain software applications. They work with businesses to understand their needs and develop software that meets those needs. This course may be useful to Software Developers who want to learn how to use Apigee X to secure APIs, and to protect data from unauthorized access.

See salaries and explore the career path for Software Developer

Systems Administrator

Systems Administrators install, configure, and maintain computer systems and networks. They ensure that systems are running smoothly and securely. This course may be useful to Systems Administrators who want to learn how to use Apigee X to secure APIs, and to protect systems from unauthorized access.

See salaries and explore the career path for Systems Administrator

Solutions Architect

Solutions Architects design and implement technology solutions for organizations. They work with business leaders and IT staff to identify business needs and develop solutions that meet those needs. This course may be useful to Solutions Architects who want to learn how to use Apigee X to secure APIs, and to protect customer data from unauthorized access.

See salaries and explore the career path for Solutions Architect

Backend Developer

Backend Developers design, develop, and maintain the server-side logic for web applications. They ensure that data is stored and processed securely, and that the application can handle a high volume of traffic. This course may be useful to Backend Developers who want to learn how to protect APIs from unauthorized access and data breaches, and to limit the rate of API calls to prevent abuse.

See salaries and explore the career path for Backend Developer

Product Manager

Product Managers are responsible for the planning, development, and launch of new products. They work with engineers, designers, and marketers to bring products to market that meet the needs of customers. This course may be useful to Product Managers who want to learn how to use Apigee X to secure APIs, and to protect customer data from unauthorized access.

See salaries and explore the career path for Product Manager

Technical Support Engineer

Technical Support Engineers provide technical support to customers. They help customers troubleshoot problems and resolve issues. This course may be useful to Technical Support Engineers who want to learn how to use Apigee X to secure APIs, and to help customers protect their data from unauthorized access.

See salaries and explore the career path for Technical Support Engineer

Reading list

We've selected seven books that we think will supplement your learning. Use these to develop background knowledge, enrich your coursework, and gain a deeper understanding of the topics covered in Securing APIs with Apigee X.

API Security in Action

Save

Survey of the main API security issues, including authentication, authorization, data validation, and rate limiting. It also discusses how to implement security measures in a variety of API frameworks.

API Security in Action

Paperback

$$$

API Security in Action

Kindle Edition

$$$

OAuth 2 in Action

Save

Provides a comprehensive overview of OAuth 2.0 and OpenID Connect, including how to use them to secure APIs. It also discusses common security pitfalls and how to avoid them.

RESTful Web APIs

Save

A classic work on RESTful web API design principles and best practices, providing a foundation for understanding API security concepts.

RESTful Web APIs: Services for a Changing World

Paperback

RESTful Web APIs: Services for a Changing World

Kindle Edition

Building Secure Software

Save

A comprehensive overview of secure software development practices, including principles and techniques relevant to API security.

Building Secure Software: How to Avoid Security...

Hardcover

$$$

(中文) Building Secure Software(Chinese Edition)

Paperback

$$$$

Building Secure Software: How to Avoid Security...

Kindle Edition

The 2019 Web Almanac

Save

Provides a comprehensive overview of web application security. It covers a wide range of topics, including authentication, authorization, rate limiting, and data protection.

RESTful Web APIs

Save

Provides a comprehensive overview of RESTful web services security. It covers a wide range of topics, including authentication, authorization, rate limiting, and data protection.

Automated Threat Handbook

Save

This document provides a list of the top 10 web application security risks. It valuable resource for understanding the most common web application security vulnerabilities.

Automated Threat Handbook

Paperback

Help others find this course page by sharing it with your friends and followers: