Consistent API management is emerging as one of the most important functions of a Platform Engineering team. With projects like Backstage, these teams

API Authorization using Aserto and Zuplo

submited by

Style Pass

2024-09-25 20:00:04

Consistent API management is emerging as one of the most important functions of a Platform Engineering team. With projects like Backstage, these teams have a way to expose and document their API estate.

Authorizing access to APIs is the next step in this journey. With Aserto’s API Authorization solution, onboarding new services is as simple as importing their OpenAPI definition and assigning users or groups various levels of access to those services, or to individual endpoints.

Since Platform Engineering teams don’t control the code to every API, they often look for common control points. An API gateway is the perfect enforcement point for an authorization policy, since it can filter requests before they are forwarded to the service, thereby requiring zero changes to the API code.

Zuplo is a modern API gateway company, and we now have a first-class integration between Aserto and Zuplo. Follow this guide to find out how to use Aserto and Zuplo together to secure your APIs.