Anypoint API Governance With MuleSoft

[@deepeshdubey2572]

Grt information

[@muletechnologyacademy-zero5625]

Thanks

[@rhaccount2858]

Hi, As per my understanding, with API Governance we can only create specification that follow best practices, industry regulations, and security standards. Is there any way to apply governance rulesets to any non-mule API deployed somewhere and even its API specification are not available in Anypoint Exchange? I know we can apply rulesets while writing API specs in design center, but in my case, I don't even have specifications of this non-mule API and also specifications are not published on Anypoint Exchange. Any help will be highly appreciated!

[@muletechnologyacademy-zero5625]

This is currently applicable for APIs published to Anypoint Exchange.

[@rhaccount2858]

@@muletechnologyacademy-zero5625 Thanks for the response!

[@vinodhbharathi2932]

Will api governance comes in titanium version ? Or do the company need to pay extra to get this ?

[@muletechnologyacademy-zero5625]

I will suggest for licensing, you need to contact MuleSoft.

[@zayir_rk3621]

I am wondering if we don't follow the standards provided by API guideliness, is it a problem to our API?. Can you elaborate more on when the rulesets not satisfied what are the impacts to our API exposures to client or customers?.

[@muletechnologyacademy-zero5625]

Till now we are working without api governance. This is recently introduced feature help is identifying whether api specs is designed with best practices or top 10 owasp has been considered or not.

[@ankurr3006]

can we have a new video on how to make our costume ruleset in API governance

[@muletechnologyacademy-zero5625]

Custom rules not supported as per my knowledge.

[@ankurr3006]

@@muletechnologyacademy-zero5625 i saw in doc we can have a custom ruleset docs.mulesoft.com/api-governance/create-custom-rulesets check this

[@ankurr3006]

@@muletechnologyacademy-zero5625 i meant modification only not a completely new one

[@surajzagade750]

Great content as usual! If u can address one doubt- how do I prevent OWASP attack in most efficient way.( How do I apply Edge security? If it's best fit solution)

[@muletechnologyacademy-zero5625]

It’s completely depends what deployment model you choose. In Cloudhub, you can apply policies and DLB to control security at edge whereas if you are using any other deployment model you can apply waf, api policies, security on load balancer like ip whitelisting or blacklisting etc