APIGEE SaaS

[#1]

Does Apigee SaaS store sensitive data on the public cloud. If so where is the data stored.

[rajeshdoda]

Apigee stores only metadata related to traffic (e.g. Requests, Response time, etc.) No request specific data is stored.

[#3]

Thanks for the response. How about API keys, tokens.

[dchiesa1]

Sure, of course. Those need to be stored.

Why are you asking? What specifically are you interested in learning?

[#5]

I am specifically interested in understanding if any sensitive data ( payloads, security metadata ) is stored on the public cloud within apigee saas. The reason is if there is such data then we have to consider a security risk assesment ( encryption , key management ) for our use.

Does Apigee provide encyrption of metadata at rest ( db or filesystem ) out of the box.

[sidd-harth]

AFAIK we need to encrypt the data at the application level before storing in Apigee.

[dchiesa1]

As Rajesh Doda answered, "No request specific data is stored."

This means no payloads, no security credentials, no security metadata is stored.

You CAN store such data yourself, but you'd have to make an explicit effort to do so.