mmm
Can you elaborate more on what you're aiming at? What the goal is?
Apigee's Advanced API Security option (an add-on) will give you an assessment and report on the security of all of your APIs. Read about it here.
If you want to see the policies enforced for a specific API, that you can do by
- examining the API proxy definition
- combining those policies with any policies in the environment-scoped flowhooks
That is a "configuration" analysis.
At RUNTIME, you could create a debugsession, capture an API request, and then examine the debugsession data to see exactly which policies ACTUALLY executed. This is important because the configuration can include conditional flows and conditions around policy steps. So the debugsession will tell you the result of evaluating those conditions at the time the inbound request was handled .
LinkedIn
Twitter
