Google Cloud Apigee X API Management Masterclass

Define APIs as contracts that enable clients to interact with resources through a mediator, using authenticated requests to search, create, update, or delete customer data.

Distinguish API as a broad term that enables applications to communicate. Web services are an internet-based subset of API, with examples like Google Map API.

Explore private, public, partner, and composite API types and compare Rest, Soap, RPC (gRPC), GraphQL, and OData implementations.

Explore four API examples, including Google Maps, OpenAI, Apigee, and weather APIs, and learn core concepts like headers, methods, and status codes.

Explore how to consume and test APIs using postman, create workspaces and collections, configure environments and variables, and work with headers, authorization, query and uri parameters.

Explore idempotence in HTTP methods, showing how get and put and delete stay idempotent while post and patch can vary; learn JSON patch and testing head and options.

Compare http methods by crud mapping, payload applicability, idempotency, and safety; learn which methods like get, post, put, patch, delete, options, and head affect data changes.

Explore the categories of http status codes, from informational 100 to server errors 5xx, and see practical examples like 100 continue, 404 not found, and 500 internal error.

Representational state transfer defines an api architecture using resources identified by uris, a uniform interface, and http methods to create, fetch, update, or delete.

Embrace the design-first approach by authoring the OpenAPI specification before implementing API logic, detailing endpoints, authentication, http methods, and request and response structures.

Explore OpenAPI specification format, including 3.0.1 and 3.0.4, YAML vs JSON, servers, paths, schemas, security schemes, and RESTful design principles for building APIs.

Generate a Google Maps API key via the Google Maps platform, enable the directions and places APIs, optionally apply restrictions, rotate when needed, and delete unused keys after the hands-on.

Explore public maps APIs with Postman, authenticate with an API key, search places, obtain place IDs, and fetch directions and autocomplete endpoints via the Google Maps API.

Follow the API life cycle—from define and design to development, testing, security, and deployment—creating real-time, reusable, platform-independent APIs consumable by Java, Python, or SaaS and deployed in Kubernetes.

Explore the fundamentals of API definitions, types, status codes, and REST principles, review idempotency and HTTP methods, and see how Google Maps API powers everyday apps with hands-on Postman practice.

Discover Apigee X on Google Cloud for comprehensive api management, a fully managed platform covering api gateway, management plane, and developer portal.

Understand why API management is essential as organizations expand APIs and how Apigee acts as an API gateway, enabling routing, authentication, caching, observability, and developer portal discovery.

Provision an Apigee eval org in Google Cloud by enabling APIs, configuring a private VPC connection, and selecting analytics and runtime regions, then access APIs via the gateway hostname.

Explore how Apigee X on Google Cloud provisions a fully managed runtime using VPC peering, internal and external load balancers, and network bridge VMs to route API traffic.

Explore Apigee on Google Cloud Console, as the classic UI retires and all features—including developer portals—migrate to the cloud console for integrated networking, monitoring, and app integration.

Test the hello world proxy on Apigee X, validate the eval environment host names and base path, and test endpoints with curl and postman using the target URL.

Update the target URL in the API proxy, deploy a new revision, and test via curl to verify routing from the proxy to the default target endpoint.

Learn how Apigee flows structure API behavior by attaching policies to proxy or target endpoints, using pre, conditional, post, and post client flows to govern requests and responses.

Create a conditional flow in Apigee X to convert xml to json for the xml endpoint by applying the xml to json policy to the response.

Learn how to use flow variables in Apigee X, including request, response, system, and proxy context, and apply path matching and accept header rules for JSON responses.

Create your first api proxy from scratch using httpbin as the target with reverse proxy template, configure base path rest/http bin v1, deploy to eval, and test endpoints via postman.

Explore the extract variable policy on a no-target Apigee X proxy, capturing URI path patterns, query parameters, headers, and JSON payloads to populate APG variables and support debugging.

Learn to use Apigee X debugging to trace requests through proxy and target flows, identify errors, and leverage debug sessions and offline debug.

Download the debug session to your local machine and open it in offline debug mode to review the saved session beyond 24 hours using the session JSON file.

Learn how to use extract variable policy and assign message policy in Apigee X on Google Cloud to set default request values, add or modify headers, and compose a response.

Learn the two Apigee proxy types—standard and extensible—and when to use each, including policy examples, cost implications, and deployment environments.

Explore apigee environment types—base, intermediate, and comprehensive—and understand how standard and extensible proxies deploy, deployment unit thresholds, multi-region availability, sla, and basic pricing considerations for paid orgs.

Learn how to view and change environment types in Apigee X, comparing eval org limitations with paid org capabilities, and how to edit to select a suitable environment type.

Learn how to configure Apigee X load balancer and target servers to decouple proxies from backend hostnames, using Google Maps API as a dynamic target across development and QA environments.

Learn to rewrite URIs in Apigee X by conditionally routing a search place request to a target URI, using a stored target path and disabling path suffix copy.

Implement a restrict access flow with a raise fault policy in Apigee X to block any undefined operations, so only the search place endpoint reaches the backend.

Export, import, and duplicate Apigee X proxies using zip archives containing proxy xml, policies, and resources integration endpoints; deploy to environments and adjust the base path in the default xml.

Import a Pet Store OpenAPI 3.0.x specification into Apigee as a proxy, selectively mapping flows like find by status and get by id, deploy to eval, and verify via Postman.

Learn to enforce key authentication using the VerifyAPIKey policy at the API level via a pre flow and operation-level conditional flows to restrict access.

Learn how consumers acquire API keys by subscribing to a public product, such as pet store free tier, and managing apps, credentials, and auto approval.

Learn to bundle API key products and apps in Apigee X, test post and get endpoints against a read-only and a gold tier product, and approve or revoke credentials.

Implement a spike arrest policy to protect your API proxy from traffic spikes by controlling rates per minute or per second, with effective count and identifier-based grouping.

Implement a flexi quota in Apigee X to enforce quotas using interval and time unit, with per-app identifiers and optional distributed or synchronous counters across Kubernetes nodes.

Discover how to reuse policies in Apigee X by creating a shared flow with verify API key and quota policies and invoking it from proxies via a flow callout policy.

Attach a shared flow at the environment level using flow hooks to enforce global policies, such as spike arrest, before proxy processing.

Learn how to create a Postman mock server to return simulated API responses during development, using existing collections and examples to model status codes and errors.

Master mocking on Apigee X by routing requests to a mock target using route rules and a header condition, enabling mock responses from mock.postman.io while keeping the real target intact.

Explore Apigee fault handling by using proxy and target fault rules, fault variables, and default fault rules to build custom error responses and log issues.

Implement fault rules in the pet store v2 proxy to handle API key errors and quota, using a fault rule, assign message policy, and a default fault rule.

Explore Cloud Functions and their integration with Cloud Run to deploy HTTP triggered Python code, manage revisions and traffic, and secure via authenticated or unauthenticated invocations.

Grant cloud functions and cloud run invoker roles in IAM, then generate and use a Google ID token to call endpoints. Create a service account for Apigee and enable impersonation.

Learn to create an Apigee proxy that authenticates to a Google Cloud function using ID tokens, configure the audience, deploy with a service account, and test success.

Discover Apigee X persistent features, including caching, property sets, and key value maps, and design response caching with correct cache keys, dual request and response flows, and TTL settings.

Implement response caching in Apigee by creating a 'response cache' policy using the request query param name as the cache key, with 600-second ttl, attached to request and response flows.

Understand apigee x cache resource, scopes, and prefixes, and learn how exclusive, application, and global scopes create cache keys from org, environment, proxy, and endpoint names.

Learn to interact with Apigee resources programmatically using the Apigee API, including proxies, APIs, and apps, via OAuth tokens and gcloud.

Store credentials securely in an environment-scoped key value map (KVM) in Apigee, add entries via API or policy, and retrieve them for proxy authentication using a name-value payload.

Read the Google Maps key from a KVM using a KeyValueMapOperations policy, store it in a private variable, and set it as the key query parameter in the target request.

Learn to implement dynamic uri rewrite in apigee x using property sets stored in proxy or environment scopes, fetched via read property set and property ref policies to route requests.

Design a new endpoint using a service callout to the places API, extract coordinates, and append them as the location query parameter for the elevation API.

Explore creating a service callout in Apigee X to fetch coordinates via the places api, extract latitude and longitude, and use them in an elevation query with a conditional policy.

Learn to use path chaining in Apigee X to call another endpoint on the same proxy via a service callout, including base paths and local target connections.

Explore proxy chaining and path chaining in Apigee X on Google Cloud by duplicating proxies, configuring base paths and proxy endpoints, and calling one proxy from another.

Design a two-step cache strategy that looks up coordinates by place name before calling the places API, and populates the cache with lat and long to reduce latency.

Implement populate cache and lookup cache policies to store elevation results in a latlng keyed cache with a one-hour expiry, enabling cache hits to skip service calls.

Implement cache invalidation on the Google Maps proxy with an invalidate cache policy triggered by a put header, using cache resource, key fragment, scope, and prefix, then test with postman.

Enhance the get elevation endpoint by calling the Places API, extracting the formatted address, and adding it to the response via a JavaScript policy in Apigee X on Google Cloud.

Learn to connect Apigee X with Google Cloud's application integration service using an API trigger, build a demo API, map input to a greeting, and test via Postman.

Create an Apigee X api proxy with an integration target, deploy via a service account invoker, and extract the greeting and execution ID for a clean response.

Explore soap essentials, wsdls, and soap 1.1 vs 1.2, learn how to test with Postman and SoapUI, and understand envelope structures for building a soap proxy.

Build a soap pass-through proxy on Apigee X and validate requests with the soap message validation policy using a WSDL, namespaces, and soap 1.2 headers.

Build a rest facade on a soap target with Apigee by mapping a country ISO code from the URI to a soap payload, then convert the XML response to JSON.

Explore GraphQL essentials by querying the SpaceX API in Apollo Studio. Learn about query, mutation, and subscription, and test schemas, fields, and variables with Postman for the Apigee X course.

Build a GraphQL proxy with Apigee and enforce schema validation via the GraphQL policy. Limit depth, count, and payload size, and test the setup with Postman.

Learn to call a function across Google Cloud projects from Apigee X using IAM authentication and a service account, by configuring cross-project targets and deploying the proxy.

Learn to create, customize, and publish an integrated developer portal with Apigee to make APIs discoverable. Compare integrated and Drupal portals and configure authentication and audiences.

Publish APIs in the catalog to enable public or authenticated visibility on the developer portal, create categories, then sign up users and align OpenAPI specs with proxies and products.

Register apps in the developer portal, attach products, and upload OpenAPI documentation for pet store v2 proxy; test api access with the api key and note cross-origin resource sharing considerations.

Discover how CORS governs cross-origin resource sharing, inspect preflight requests, and see how access-control-allow-origin, credentials, headers, methods, and max-age control browser access.

Implement a cors policy in the Apigee environment to enable cross-origin requests from the developer portal and test APIs. Validate preflight requests and access-control headers for trusted origins.

Create a space graph product, add a GraphQL query operation to the proxy, and publish with eval access; attach the GraphQL schema and use the proxy URL as the endpoint.

Explore how teams and audiences enable granular access control in the Apigee X portal, outlining owner, app admin, and viewer roles and their permissions for apps, APIs, and pages.

Configure the apigee x portal to send automated emails from your own smtp server, restrict signups by domain or specific emails, and customize account notify and account verify messages.

Map your own domain to access the Apigee portal by using a load balancer front end and a network endpoint group backend, via DNS A records to the public IP.

Create a network endpoint group, configure a global load balancer with a public IP, set up a Google managed certificate, and map a custom domain to the Apigee portal.

Explore how SAML-based single sign-on uses IDP and SP to enable access to apps like Apigee, with SP- and IDP-initiated flows and certificate-based security.

Configure saml between Apigee and Okta by exchanging metadata, setting the single sign-on URL and entity ID, and importing idp certificate, then assign the Okta group and reset custom domain.

Explore core api security concepts from platform security on Google Cloud to data confidentiality, including ip filtering, access control, tls, and rbac, plus authentication methods like saml, oauth2, and jwt.

Implement basic authentication for an Apigee proxy or backend by decoding client credentials, encoding them into a header, validating against a CVM store, and removing the authorization header after authentication.

Understand the OAuth 2 flow, including authorization code and client credentials grant types, compare SAML and IDPs, and follow hands-on demos with Apigee and Okta.

Build an oauth2 authorization server proxy with token and authorize endpoints, supporting client credentials and authorization code flows, generating access tokens and authorization codes, tested with postman.

Build and verify an OAuth 2 resource proxy in Apigee X on Google Cloud, validating access tokens and scopes from Postman, adjusting scope handling, and deploying revisions.

Create an Okta oauth2 app with OIDC, configure redirect URLs and scopes, extract the JWT from the authorization header, and verify it with Apigee’s verifyJWT policy using provider metadata.

Test Okta oauth2 integration and understand jwts within Apigee X on Google Cloud. Verify end-to-end flows, default policies, and jwt claims and signatures.

Apply IP filtering and regex protection to a no target Apigee proxy, testing access control with CIDR ranges and X-forwarded-for, and detecting SQL injection patterns.

Explore json and xml threat protection policies that enforce json array and object limits, depth, and xml element name and attribute name limits, with a proxy-based demo.

Mask sensitive data in Apigee debug traces using the debug mask at the environment level, and manage masks for requests, headers, and variables with get, update, patch, and replace operations.

Explore how IAM principals, roles, and permissions govern access in Apigee on Google Cloud. Understand role-based access, examples like Apigee API reader, and inheritance across organization, folder, and project levels.

Discover predefined Apigee roles like API reader, API admin, environment admin, read only admin, and org admin, and learn to manage them via Google Cloud IAM.

Understand how TLS secures web connections with HTTPS, cipher suites, and certificate authorities. Explore the handshake, public key cryptography, and the keystore and trust store in one-way and mutual TLS.

Create a trust store in Apigee X, import certificates, and use a reference to enable TLS for southbound connections to a backend, with certificate rotation without redeploying.

Enforce one-way tls from Apigee to a target using a trust store and ssl info; test with a Hello World proxy and verify the handshake by switching environment references.

scale the Apigee gateway by increasing gateway nodes and enabling throughput auto scaling; achieve high availability by deploying runtime instances across regions, with Apigee handling backups and encryption.

Explore runtime instance configurations in Apigee X, including environment attachments, service attachment with private service connect, and access logging options and runtime version details.

Explore how Apigee releases are documented in the Apigee documentation and Google Cloud release notes, including dates, release types, Apigee UI references, and RSS notification options.

Explore environments, environment groups, and hostnames in Apigee X, and how environments attach to runtime instances. See how prod and non-prod hierarchies across organizations enable deployment options and multi-region availability.

Learn how to create a new Apigee environment and environment group, promote proxies to production, and configure environment-specific settings and routing in Apigee X on Google Cloud.

Master Apigee audit logs in Google Cloud to track who did what, when, and where, covering admin activity, data access, system audit logs, and policy denied events; query and alert.

Access the Apigee runtime from your VPC via peering, bypass the external load balancer, and use a private domain with a DNS zone and A record to the internal IP.

Learn to restrict external api calls by updating the global external load balancer and routing only matching requests to the Apigee proxy backend via host and path rules.

Use private service connect to securely connect to Google Cloud managed services across projects. Create PSC endpoints, network endpoint groups, and internal load balancers to route traffic without VPC peering.

Publish a private service connect PSC service attachment from a producer VPC to enable cross-project Apigee access via endpoint attachments.

Shows how to create a PSC southbound endpoint attachment to connect a consumer project to a service attachment across VPCs, deploy a reverse proxy, and test connectivity.

Explore how shared VPC and VPC peering connect the Apigee service to the Google API runtime across host and service projects, with non-transitive behavior and reserved IP ranges.

Configure a custom domain to access Apigee APIs from internet; map DNS A records to the load balancer IP and implement host and path rules with a managed SSL certificate.

Provision a pay-as-you-go Apigee X org with customized networking, private service connect, API enablement, and runtime IP ranges. Validate a Hello World proxy and note base environment policy limits.

Explore pay as you go architecture for Apigee X, using private service connect network endpoint group and service attachments to connect the runtime behind a global load balancer.

Expand pay as you go Apigee runtime to new regions by configuring a private service connect backed load balancer, and network endpoint groups for high availability and region-aware responses.

Disable the pay as you go billing, then delete the Apigee project to stop charges and rely on a one-month soft delete before permanent removal.