This chapter explored the various in-built security policies available with API-CS and how these can be used to mitigate against threats that can be exploited on exposed APIs. It is the job of the API gateway to implement these policies. Gateways can be installed either at the external perimeter of an organization or to provide protection from internal attacks, depending on how the logical gateways are configured. Further information on how to define and configure gateways can be found in Chapter 5, Platform Setup and Gateway Configuration.

The chapter also looked at how policies can be tested using tools such as Postman. However, this was for illustrative purposes only and Chapter 7, Testing APIs with API Fortress shows how to configure and use API Fortress for more complete functional testing of an API.

Finally, this chapter briefly touched on the analytics available...