Apigee Edge does not have any built-in feature to scan attachments for malware. The common approach is for you to send the file to a staging file system, where it is then scanned before moved into a "clean" directory. This seems like a good use case for Apigee Integration as it provides all the tools to move/stage files and trigger use third-party systems like a malware scanning service.
Otherwise, you could possibly use a third-party malware/virus scanner API to send the attachment there in your proxy flow (via a Service Callout). Depending on the time taken to scan the file, this would likely be an asynchronous task as the scanner can take time. If malware is detected, you then need to take action on the destination of the file somehow to mediate the affected file.
Another interesting option would be to use an External Callout. With this approach you could build a sidecar gRPC service that includes the malware/virus scanner agent running that could perform the inspection, then report back to Apigee.
LinkedIn
Twitter
