Issue 163: Why API security strategies fail, AWS keynote on good API design, biggest breaches in 2021
Brief
This week, we have an article on seven reasons why API security strategies are failing, details on the recent keynote by Werner Vogels at AWS re:Invent on six rules for good API design, an article by Cisco on API discovery, and a review of some of the biggest API security attacks in 2021.
Article: Seven reasons your API security strategy is failing
This week, AmazicWorld featured a review of why API security strategies are failing to have the desired effect. The author’s view is that whilst developers are well-versed in how to create APIs, security risks that APIs pose are an increasing threat to organizations.
These risks are in large part a consequence of rapid API adoption: the sprawl of APIs is widening the threat landscape, and the fact that APIs are well-documented and can be easily reverse-engineered enables attackers to take advantage of them.