Validation of requests with Apigee

[LauraRamirez22]

How can I validate in my api the requests that come from Apigee that I don't know by headers

[dchiesa1]

Usually this is done with mutual (aka 2-way) TLS - your upstream endpoint can validate that the incoming call used a specific TLS key. If you provision only Apigee with that TLS key, then you know the call came from Apigee. 

[API-Evangelist]

Curious why would you ignore headers?

You are discarding whole lot of patterns (ex: token exchange,signature verification, hmac etc) and it leads to only mutual tls pattern which requires proper pki infrastructure setup or by manipulating payload ( encryption/decryption of paylaod & validate) etc..