You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: articles/api-management/mitigate-owasp-api-threats.md
+2-2Lines changed: 2 additions & 2 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -15,7 +15,7 @@ The Open Web Application Security Project ([OWASP](https://owasp.org/about/)) Fo
15
15
The OWASP [API Security Project](https://owasp.org/www-project-api-security/) focuses on strategies and solutions to understand and mitigate the unique *vulnerabilities and security risks of APIs*. In this article, we'll discuss recommendations to use Azure API Management to mitigate the top 10 API threats identified by OWASP.
16
16
17
17
> [!NOTE]
18
-
> In addition to following the recommendations in this article, you can enable [Defender for APIs](https://aka.ms/apiSecurityOverview) (preview), a capability of Microsoft Defender for Cloud, for API security insights, recommendations, and threat detection. [Learn more about using Defender for APIs with API Management](protect-with-defender-for-apis.md)
18
+
> In addition to following the recommendations in this article, you can enable Defender for APIs (preview), a capability of [Microsoft Defender for Cloud](/azure/defender-for-cloud/defender-for-cloud-introduction), for API security insights, recommendations, and threat detection. [Learn more about using Defender for APIs with API Management](protect-with-defender-for-apis.md)
19
19
20
20
## Broken object level authorization
21
21
@@ -317,4 +317,4 @@ Learn more about:
317
317
*[Security baseline for API Management](/security/benchmark/azure/baselines/api-management-security-baseline)
318
318
*[Security controls by Azure policy](security-controls-policy.md)
319
319
*[Landing zone accelerator for API Management](/azure/cloud-adoption-framework/scenarios/app-platform/api-management/landing-zone-accelerator)
320
-
*[Defender for APIs](https://aka.ms/apiSecurityOverview)
320
+
*[Microsoft Defender for Cloud](/azure/defender-for-cloud/defender-for-cloud-introduction)
Copy file name to clipboardExpand all lines: articles/api-management/protect-with-defender-for-apis.md
+5-6Lines changed: 5 additions & 6 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -38,16 +38,15 @@ This article shows how to use the Azure portal to enable Defender for APIs from
38
38
39
39
* At least one API Management instance in an Azure subscription. Defender for APIs is enabled at the level of a subscription.
40
40
* One or more supported APIs must be imported to the API Management instance.
41
-
* Role to [enable the Defender for APIs plan](/azure/defender-for-cloud/permissions).
42
-
* Azure account with permissions to sign into the Azure portal
43
-
* Contributor or Owner role on relevant Azure subscriptions, resource groups, or API Management instances that you want to secure.
41
+
* Role assignment to [enable the Defender for APIs plan](/azure/defender-for-cloud/permissions).
42
+
* Contributor or Owner role assignment on relevant Azure subscriptions, resource groups, or API Management instances that you want to secure.
44
43
45
44
## Onboard to Defender for APIs
46
45
47
46
Onboarding APIs to Defender for APIs is a two-step process: enabling the Defender for APIs plan for the subscription, and onboarding unprotected APIs in your API Management instances.
48
47
49
48
> [!TIP]
50
-
> You can also onboard to Defender for APIs directly in the Defender for Cloud portal, where more API security insights and inventory experiences are available.
49
+
> You can also onboard to Defender for APIs directly in the Defender for Cloud interface, where more API security insights and inventory experiences are available.
51
50
52
51
53
52
### Enable the Defender for APIs plan for a subscription
@@ -106,9 +105,9 @@ For the security alerts received, Defender for APIs suggests necessary steps to
106
105
107
106
## Offboard protected APIs from Defender for APIs
108
107
109
-
You can remove APIs from protection by Defender for APIs by using the Defender for Cloud portal. For more information, see the Microsoft Defender for Cloud documentation.
108
+
You can remove APIs from protection by Defender for APIs by using Defender for Cloud in the portal. For more information, see the Microsoft Defender for Cloud documentation.
110
109
111
110
## Next steps
112
111
113
112
* Learn more about [Defender for Cloud](/azure/defender-for-cloud/defender-for-cloud-introduction)
114
-
* Learn how to [upgrade and scale](upgrade-and-scale.md) an API Management instance.
113
+
* Learn how to [upgrade and scale](upgrade-and-scale.md) an API Management instance
0 commit comments