Skip to content

Commit 4641153

Browse files
[API Shield] Sequence rules new dash (#23642)
* sequence rules new dash * endpoints pt1 * feedback
1 parent d12d9f8 commit 4641153

File tree

3 files changed

+58
-31
lines changed

3 files changed

+58
-31
lines changed

src/content/docs/api-shield/api-gateway.mdx

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -25,7 +25,7 @@ APIs are fundamental to modern applications but are increasingly targeted by mal
2525

2626
### Management and Monitoring tools
2727

28-
- **[Endpoint Management](/api-shield/management-and-monitoring/endpoint-management/)**: Gain visibility into your API endpoints, including discovery of shadow APIs and monitoring of active endpoints.
28+
- **[Endpoint management](/api-shield/management-and-monitoring/endpoint-management/)**: Gain visibility into your API endpoints, including discovery of shadow APIs and monitoring of active endpoints.
2929

3030
- **[Analytics and logging](/api-shield/security/sequence-analytics/)**: Access detailed analytics and logs to monitor API usage, performance, and security events.
3131

src/content/docs/api-shield/changelog.mdx

Lines changed: 6 additions & 6 deletions
Original file line numberDiff line numberDiff line change
@@ -21,7 +21,7 @@ API Shield now automatically labels endpoints with risks due to missing schemas
2121

2222
**API Authentication Posture**
2323

24-
Customers will see per-endpoint authentication details inside API Shield's [Endpoint Management](/api-shield/management-and-monitoring/) for zones with configured session identifiers.
24+
Customers will see per-endpoint authentication details inside [Endpoints](/api-shield/management-and-monitoring/) for zones with configured session identifiers.
2525

2626
## 2024-12-19
2727

@@ -33,7 +33,7 @@ API Shield now automatically labels endpoints with risks due to authentication s
3333

3434
**Endpoint labels**
3535

36-
Customers can now organize their endpoints by use case and custom labels in [Endpoint Management](/api-shield/management-and-monitoring/endpoint-labels/) for easy reference and future machine learning (ML) model training.
36+
Customers can now organize their endpoints by use case and custom labels using the [Endpoint labeling service](/api-shield/management-and-monitoring/endpoint-labels/) for easy reference and future machine learning (ML) model training.
3737

3838
## 2024-10-18
3939

@@ -49,9 +49,9 @@ Customers can now enable the [Fallthrough Action](/api-shield/security/schema-va
4949

5050
## 2024-08-28
5151

52-
**Increased capacity for Endpoint Management and Schema Validation**
52+
**Increased capacity for Endpoint management and Schema Validation**
5353

54-
Endpoint Management and Schema Validation now support up to 10,000 saved and validated API endpoints.
54+
Endpoint management and Schema Validation now support up to 10,000 saved and validated API endpoints.
5555

5656
## 2024-07-08
5757

@@ -79,6 +79,6 @@ Customers can now build [Sequence Mitigation](/api-shield/security/sequence-miti
7979

8080
## 2024-02-23
8181

82-
**Endpoint Management supports hostname variables**
82+
**Endpoint management supports hostname variables**
8383

84-
Customers can now save endpoints in [Endpoint Management](/api-shield/management-and-monitoring/) that contain variables in the hostname. Hostname variables are supported across all product features.
84+
Customers can now save endpoints in [Endpoint management](/api-shield/management-and-monitoring/) that contain variables in the hostname. Hostname variables are supported across all product features.

src/content/docs/api-shield/security/sequence-mitigation/manage-sequence-rules.mdx

Lines changed: 51 additions & 24 deletions
Original file line numberDiff line numberDiff line change
@@ -10,33 +10,60 @@ head:
1010
content: Manage sequence rules
1111

1212
---
13-
import { Steps } from "~/components"
13+
import { Steps, Tabs, TabItem } from "~/components"
1414

1515
## Create a sequence rule
1616

17-
<Steps>
18-
1. Log in to the [Cloudflare dashboard](https://dash.cloudflare.com/), and select your account and domain.
19-
2. Go to **Security** > **API Shield** > **API Rules**.
20-
3. Select **Create sequence rule**.
21-
4. <a id="rule-form"/>
22-
Name your rule.
23-
5. Select a starting endpoint. This is the endpoint that you expect users to hit first in their request flow when using your API.
24-
- Choose a hostname to display the list of endpoints for that hostname.
25-
- Choose an endpoint.
26-
- Select **Set as starting endpoint**.
27-
6. Select a final endpoint. This is the endpoint you are targeting for protection.
28-
- Choose a hostname to display the list of endpoints for that hostname.
29-
- Choose an endpoint.
30-
- Select **Set as ending endpoint**.
31-
7. Choose an action that corresponds to the security model type:
32-
- **Allow**: This will create a positive security model by defining approved sequences on your API.
33-
- **Log** / **Block**: This will test or enforce a negative security model defining known bad sequences on your API.
34-
:::note
35-
36-
If you chose **Allow**, select whether to log or block the request to the final endpoint when users do not first request the starting endpoint in the sequence.
37-
:::
38-
8. Select **Create rule**.
39-
</Steps>
17+
<Tabs syncKey="dashNewNav">
18+
<TabItem label="Old dashboard">
19+
<Steps>
20+
1. Log in to the [Cloudflare dashboard](https://dash.cloudflare.com/), and select your account and domain.
21+
2. Go to **Security** > **API Shield** > **API Rules**.
22+
3. Select **Create sequence rule**.
23+
4. Name your rule.
24+
5. Select a starting endpoint. This is the endpoint that you expect users to hit first in their request flow when using your API.
25+
- Choose a hostname to display the list of endpoints for that hostname.
26+
- Choose an endpoint.
27+
- Select **Set as starting endpoint**.
28+
6. Select a final endpoint. This is the endpoint you are targeting for protection.
29+
- Choose a hostname to display the list of endpoints for that hostname.
30+
- Choose an endpoint.
31+
- Select **Set as ending endpoint**.
32+
7. Choose an action that corresponds to the security model type:
33+
- **Allow**: This will create a positive security model by defining approved sequences on your API.
34+
- **Log** / **Block**: This will test or enforce a negative security model defining known bad sequences on your API.
35+
:::note
36+
37+
If you chose **Allow**, select whether to log or block the request to the final endpoint when users do not first request the starting endpoint in the sequence.
38+
:::
39+
8. Select **Create rule**.
40+
</Steps>
41+
</TabItem>
42+
<TabItem label="New dashboard" icon="rocket">
43+
<Steps>
44+
1. Log in to the [Cloudflare dashboard](https://dash.cloudflare.com/), and select your account and domain.
45+
2. Go to **Security** > **Security rules**.
46+
3. Select **Create rule** and choose **API sequence rules**.
47+
4. Name your rule.
48+
5. Select a starting endpoint. This is the endpoint that you expect users to hit first in their request flow when using your API.
49+
- Choose a hostname to display the list of endpoints for that hostname.
50+
- Choose an endpoint.
51+
- Select **Set as starting endpoint**.
52+
6. Select a final endpoint. This is the endpoint you are targeting for protection.
53+
- Choose a hostname to display the list of endpoints for that hostname.
54+
- Choose an endpoint.
55+
- Select **Set as ending endpoint**.
56+
7. Choose an action that corresponds to the security model type:
57+
- **Allow**: This will create a positive security model by defining approved sequences on your API.
58+
- **Log** / **Block**: This will test or enforce a negative security model defining known bad sequences on your API.
59+
:::note
60+
61+
If you chose **Allow**, select whether to log or block the request to the final endpoint when users do not first request the starting endpoint in the sequence.
62+
:::
63+
8. Select **Create rule**.
64+
</Steps>
65+
</TabItem>
66+
</Tabs>
4067

4168
## Edit a sequence rule
4269

0 commit comments

Comments
 (0)