Defining Policies for APIs

Chapter 3, Designing the API introduced the concept of API design-first and described how Apiary can be used to define, document, and negotiate API contracts with consumers. It also detailed how to create and publish an API to the developer portal for consumption. This chapter will focus on securing APIs before they are exposed to developers on the public internet or indeed to internal developers. It will describe how to create managed APIs using APIP CS and apply policies to control access and monitor usage, thus providing a secure environment for API access.