I have a query regarding the Apigee Hybrid Security mechanism. Considering a scenario wherein an unauthorized user accesses the Apgiee Hybird Management plane and updates API proxy definition to bypass certain security checks(e.g. RegularExpression policy used for SQL injection detection). In this case the revised API proxy definition might get synchronized with the Apigee runtime making the API prone to SQL injection attack.
Is there a way to prevent such type of Management plane attacks? Will it be possible to apply any additional checks at API Runtime level to identify such changes?
Is it possible to apply any controls on the API Proxy sync mechanism from Management Plane to Runtime Plane?
LinkedIn
Twitter
