API Connect

Write custom data to analytics event record without log policy

The current requirement to include a Log policy in order to write custom_data is not intuitive, particularly given that the native flow without any Log policy already captures all standard fields automatically.

1 day ago in API Connect Submitted

1 VOTE

Unsafe-Inline value in Content Security Policy of HTTP Header is not set correctly

The unsafe-inline directive allows the use of inline resources, such as inline '<script>>' and '<style>' elements, 'JavaScript:' URLs, and inline event handlers, where a user can inject a script attribute into your website. It can b...

2 days ago in API Connect Submitted

2 VOTE

Source ip address, http method,Http status codes, source URLs and multiple fields required for forensic analysis of attack was not captured in the provided APIC audit logs.

Necessary for forensic analysis of any cyber attack on the system as per cyber security guidelines Missing Source IP address Missing HTTP Methods Missing Status Code Missing HTTP URL

8 days ago in API Connect Submitted

1 VOTE

Enhancement Request - Request to add Analytics cluster Monitoring Metrics to “oc get a7s” on OpenShift.

We would like to request that the Analytics monitoring metrics introduced in the following community article (particularly "storage_memory_ok") to be included in the items that can be checked via the "oc get a7s" command. Monitoring APIC Analytics...

12 days ago in API Connect Submitted

1 VOTE

Enhancement Request – Encrypt Password During Login Authentication to Prevent Unencrypted Sensitive Data Transmission in Developer Portal

During VAPT (Vulnerability Assessment and Penetration Testing), a security observation was identified in the application login portal authentication flow. Currently, while submitting credentials (username and password) through the login page, the ...

15 days ago in API Connect Submitted

10 VOTE

Support Analytics Logging for Multiple Invoke Policies

Currently, when multiple Invoke policies are configured in an API assembly, API Manager Analytics appears to collect and display only the request and response information from the final Invoke policy. In many integration scenarios, a single API in...