Skip to content

Commit a2f15dd

Browse files
committed
remove links; review comments
1 parent 5d933ff commit a2f15dd

File tree

2 files changed

+7
-8
lines changed

2 files changed

+7
-8
lines changed

articles/api-management/mitigate-owasp-api-threats.md

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -15,7 +15,7 @@ The Open Web Application Security Project ([OWASP](https://owasp.org/about/)) Fo
1515
The OWASP [API Security Project](https://owasp.org/www-project-api-security/) focuses on strategies and solutions to understand and mitigate the unique *vulnerabilities and security risks of APIs*. In this article, we'll discuss recommendations to use Azure API Management to mitigate the top 10 API threats identified by OWASP.
1616

1717
> [!NOTE]
18-
> In addition to following the recommendations in this article, you can enable [Defender for APIs](https://aka.ms/apiSecurityOverview) (preview), a capability of Microsoft Defender for Cloud, for API security insights, recommendations, and threat detection. [Learn more about using Defender for APIs with API Management](protect-with-defender-for-apis.md)
18+
> In addition to following the recommendations in this article, you can enable Defender for APIs (preview), a capability of [Microsoft Defender for Cloud](/azure/defender-for-cloud/defender-for-cloud-introduction), for API security insights, recommendations, and threat detection. [Learn more about using Defender for APIs with API Management](protect-with-defender-for-apis.md)
1919
2020
## Broken object level authorization
2121

@@ -317,4 +317,4 @@ Learn more about:
317317
* [Security baseline for API Management](/security/benchmark/azure/baselines/api-management-security-baseline)
318318
* [Security controls by Azure policy](security-controls-policy.md)
319319
* [Landing zone accelerator for API Management](/azure/cloud-adoption-framework/scenarios/app-platform/api-management/landing-zone-accelerator)
320-
* [Defender for APIs](https://aka.ms/apiSecurityOverview)
320+
* [Microsoft Defender for Cloud](/azure/defender-for-cloud/defender-for-cloud-introduction)

articles/api-management/protect-with-defender-for-apis.md

Lines changed: 5 additions & 6 deletions
Original file line numberDiff line numberDiff line change
@@ -38,16 +38,15 @@ This article shows how to use the Azure portal to enable Defender for APIs from
3838

3939
* At least one API Management instance in an Azure subscription. Defender for APIs is enabled at the level of a subscription.
4040
* One or more supported APIs must be imported to the API Management instance.
41-
* Role to [enable the Defender for APIs plan](/azure/defender-for-cloud/permissions).
42-
* Azure account with permissions to sign into the Azure portal
43-
* Contributor or Owner role on relevant Azure subscriptions, resource groups, or API Management instances that you want to secure.
41+
* Role assignment to [enable the Defender for APIs plan](/azure/defender-for-cloud/permissions).
42+
* Contributor or Owner role assignment on relevant Azure subscriptions, resource groups, or API Management instances that you want to secure.
4443

4544
## Onboard to Defender for APIs
4645

4746
Onboarding APIs to Defender for APIs is a two-step process: enabling the Defender for APIs plan for the subscription, and onboarding unprotected APIs in your API Management instances.  
4847

4948
> [!TIP]
50-
> You can also onboard to Defender for APIs directly in the Defender for Cloud portal, where more API security insights and inventory experiences are available.
49+
> You can also onboard to Defender for APIs directly in the Defender for Cloud interface, where more API security insights and inventory experiences are available.
5150
5251

5352
### Enable the Defender for APIs plan for a subscription
@@ -106,9 +105,9 @@ For the security alerts received, Defender for APIs suggests necessary steps to
106105

107106
## Offboard protected APIs from Defender for APIs
108107

109-
You can remove APIs from protection by Defender for APIs by using the Defender for Cloud portal. For more information, see the Microsoft Defender for Cloud documentation.
108+
You can remove APIs from protection by Defender for APIs by using Defender for Cloud in the portal. For more information, see the Microsoft Defender for Cloud documentation.
110109

111110
## Next steps
112111

113112
* Learn more about [Defender for Cloud](/azure/defender-for-cloud/defender-for-cloud-introduction)
114-
* Learn how to [upgrade and scale](upgrade-and-scale.md) an API Management instance.
113+
* Learn how to [upgrade and scale](upgrade-and-scale.md) an API Management instance

0 commit comments

Comments
 (0)