Reusing Policies Across Proxies in APIGEE X

[Arijit_apigee]

Hello Members,

I am evaluating APIGEE platform using APIGEE X trial version. I have created two proxies where I want to include SQLInjection prevention regex policy. I noticed that for each and every proxy I need to create the same policy everytime to include it. Is it not possible to create the policy once and reuse across the proxies ? 

Kind Regards

Arijit

[apickelsimer · Accepted solution]

You should configure a "Shared Flow". Shared Flows allow you to group policies together and reference those in the proxies of your choice, without having to create redundant policy. Usually you will using Shared Flows for crossing cutting functions (e.g. security, rate limiting, threat protection, logging, etc). See https://cloud.google.com/apigee/docs/api-platform/fundamentals/shared-flows for the official docs. Also, take a look at some of the samples we have posted on the Apigee github repo, https://github.com/apigee/devrel/tree/main/references/common-shared-flows.

There is also a concept of a "Flow Hook", which allows you to apply universal Shared Flows to an entire environment, meaning every proxy in that environment will have the shared flow enforced. Read more on that at https://cloud.google.com/apigee/docs/api-platform/fundamentals/flow-hooks

[Arijit_apigee]

Thanks, it worked . Also good to know about flow hooks

Kind Regards

Arijit