Skip to content

Commit 52e93d8

Browse files
Apply suggestions from code review
Co-authored-by: David Curwin <[email protected]>
1 parent 6b28e77 commit 52e93d8

File tree

1 file changed

+1
-3
lines changed

1 file changed

+1
-3
lines changed

articles/defender-for-cloud/faq-defender-for-apis.yml

Lines changed: 1 addition & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -61,9 +61,7 @@ sections:
6161
- name: Questions about Defender for APIs and WAF
6262
questions:
6363
- question: Is Azure WAF sufficient for securing APIs?
64-
answer: While Web Application Firewalls (WAF) are a valuable solution for protecting applications, they may not provide complete security for APIs. WAFs are designed to apply generalized protection measures like dictionary, pattern, and signature mapping, which work well for applications with consistent traffic patterns. However, APIs are unique to each application and have dynamically changing nature, making the abstract protections offered by WAFs less effective.
65-
APIs have different request and response payloads, and each consumer interacts with them in their own specific ways. The general dictionary, pattern, and signature mappings used by WAFs may not adequately offer complete in depth protection for APIs due to their uniqueness. Although there are some cases where overlap exists, such as detecting and preventing SQL injection attacks, APIs often require more granular security measures.
66-
To achieve the level of security needed for APIs, a solution like Microsoft Defender for APIs is recommended. Defender for APIs learns and understands the API logic using machine learning algorithms, thereby providing a contextual understanding that enables more precise and effective security measures. This granular level of protection helps safeguard APIs against various threats and ensures a higher level of security for organizations.
64+
answer: While Web Application Firewalls (WAF) are a valuable solution for protecting applications, they may not provide complete security for APIs. WAFs are designed to apply generalized protection measures like dictionary, pattern, and signature mapping, which work well for applications with consistent traffic patterns. However, APIs are unique to each application and have dynamically changing nature, making the abstract protections offered by WAFs less effective. <br> APIs have different request and response payloads, and each consumer interacts with them in their own specific ways. The general dictionary, pattern, and signature mappings used by WAFs may not adequately offer complete in depth protection for APIs due to their uniqueness. Although there are some cases where overlap exists, such as detecting and preventing SQL injection attacks, APIs often require more granular security measures. <br> To achieve the level of security needed for APIs, a solution like Microsoft Defender for APIs is recommended. Defender for APIs learns and understands the API logic using machine learning algorithms, thereby providing a contextual understanding that enables more precise and effective security measures. This granular level of protection helps safeguard APIs against various threats and ensures a higher level of security for organizations.
6765

6866
additionalContent: |
6967

0 commit comments

Comments
 (0)