Google Cloud Apigee X API Management In A Weekend

Discover how to set up your lab by installing essential software—browsers, office suite, Postman, Notepad++, and PDF reader—and meeting hardware and OS requirements.

Register for a GCP free trial, create a project, enable RPG APIs, and provision the RPG ECS with a load balancer for the hello world proxy.

Learn how to remove a GCP RPG project after two months to avoid charges, including downloading proxies and shutting down the project via the Google console.

Decide if you have seen the Apigee Edge course on Udemy; the video explains two versions—RPG edge (old) and RPG X (new)—and when to skip or complete sections.

Explore what APIs and microservices are, including rest and soap APIs, API specification and implementation, and how API management with Apigee and RPG helps orchestrate microservices over monolithic systems.

Discover how Apigee X enables api management through proxies and gateways, with security, transformation, analytics, and monetization, to design, publish, and govern microservice APIs.

Discusses a latest but not yet implemented GCP feature and why it’s not used in this course, and guides you to the RPG user interface on RPG.google.com.

Navigate the Apigee X UI via left menu or tiles to access API proxies and environments, then explore analytics, publishing, API products, and the developer portal.

Explore how an api proxy acts on behalf of a backend api, applying security, mediation, analytics, and caching, while illustrating the proxy design pattern and forward and reverse proxy types.

Create and deploy a simple greetings proxy in Apigee X to the eval environment using the RPG mocking backend, then test it with Postman.

Explore the simple greetings proxy in Apigee X, covering deployments, revisions, and XML configuration, plus develop, debug, and performance tabs for monitoring traffic and metrics.

Navigate the new Apigee X UI to create, deploy, undeploy, and manage api proxies and revisions, compare it with the classic UI, and use api monitoring for performance insights.

Discover out of the box policies in Apigee X, previewing more than 40 prebuilt functionalities for API proxies, and learn where to locate them in the Apigee account.

Add the raise default policy to an Apigee X API proxy to reject unsupported paths with a 404, using preflow conditions, deploying revisions, and testing with Postman.

Explore the anatomy of the Apigee X API management platform, including API proxy structure, proxy and target endpoints, flows, policies, and route and fault rules with load balancers back-end services.

Configure and deploy API proxies across dev, test, pre-production, and production environments using environment groups to route traffic and test with simulated and real requests.

Explore the OpenAPI specification version 3.0.2 in YAML or JSON to describe REST APIs for Apigee proxies, detailing endpoints, operations, parameters, responses, security schemes, and reusable components.

Explore the Indian Air Flights API backend, its five operations, and how API proxies with an open API specification enable retrieving, adding, updating, and deleting flights.

Create an OpenAPI specification (OAS) for the Indian Air Flights API using Swagger Hub, define five operations, use mock testing, reuse schemas and examples with components, and API key security.

Create an Indian Air Flights API proxy from an OpenAPI specification, configure backend URL, and deploy it; test with postman, a pass-through proxy lacks security until policies enforce API key.

Explore and debug the Indian air flight's API proxy by using the eval environment, then inspect the debug session, request flows, and conditional flows via the transaction map.

Learn to import existing API proxies by uploading a proxy bundle, deploy the payments API proxy to the eval environment, and test two dummy operations with assign message policies.

Secure an Apigee X API proxy with the Verify API Key Policy by retrieving the API key from the request header and enforcing 401 for missing or invalid keys.

Explore how API products enable developer apps to access API proxies via API keys and subscriptions to backend services. See how one-to-many and many-to-many relationships shape access control.

Create API products that grant access to all operations from one or more API proxies. Set environments to eval, enable public access, automate credential creation, and enforce quotas.

Register app developers and developer apps in Apigee, subscribe apps to API products to obtain API keys and secrets, then access proxies for API operations.

Obtain an api key from your app and access api proxies with Postman by sending the api key header. Use the developer app to make direct requests to the proxy.

Enable OAS validations policy in the API proxy to enforce the OpenAPI specification, reject missing mandatory query parameters, and reduce backend load in the Indian Air Flights API proxy.

Configure a quota policy in the API proxy to limit requests per minute. Use access entity and extract variables policies to fetch app-specific quota and time unit, applying per-app limits.

Configure the spike arrest policy to throttle sudden request spikes, using per second or per minute rates and the use effective count option for shared or separate throttling.

Learn how Apigee flow variables expose dynamic information to policies, including API proxy name and revision, client details, request and response data, target endpoints, and environment context.

Use the message logging policy to write log messages from an API proxy. Send logs to syslog servers or cloud logging, authenticate with a customer token.

Configure an access control policy to restrict api proxy requests by ip address. Define ip rules with match rules and use true-client-ip or x-forwarded-for to verify clients.

Configure and reuse policies through shared flows to apply access entity, extract variables, and quota policies across proxies. Use flow callouts to execute shared flows and validate quota enforcement.

Discover flow hooks that auto execute a shared flow on every proxy without flow colored policy. Hook at pre proxy, post proxy, pre target, or post target for per-request execution.

Use response cache policy to cache get flights data in a cache table with ten-minute expiry, keyed by origination, destination, and date of travel, to reduce backend calls.

apply assign message policy in Apigee X proxy to copy from airport, to airport, and travel date into origination, destination, and date of travel using an OpenAPI specification.

Learn to use the JavaScript policy in Google Cloud Apigee X to manipulate query parameters, flow variables, and HTTP requests, deploy revisions, and test with Postman.

Secure api proxies with OAuth 2.0 using theOAuth v2 policy, focusing on client credentials to generate and validate access tokens via bearer authorization and API key verification.

Learn to secure api proxies with JWT by generating a token on the JWT server, embedding issuer, subject, audiences, and api key in header, then decrypting with a secret key.

Store secret keys in Key Value Maps (CVM) and retrieve them via the CVM operations policy to securely generate and verify JWT tokens across API proxies.

Secure APIs with basic authentication by implementing sign up and login flows and handling authorization header. Use a service callout policy to verify credentials and return 200 or 401 responses.

Transform the response json array to xml using the json to xml policy, configuring array root and item names, indentation, namespaces, attributes, text nodes, and invalid character handling.

Configure the Excel Transform policy to customize the XML response from JSON-to-XML, mapping flight data into a flights root and updating tags like id, code, and price.