Saffron & Sage, a small online food shop, has wired its shop, accounting, email marketing, shipping tool and CRM to its data with API keys and integrations. Each connection is drawn as a door into the shop's data: most are scoped to the least access they need, the shop plugin has far too much access, and a forgotten old app's key has leaked online. Beside it, the inventory of keys and connections decides what to keep, what to narrow and what to revoke, with keys treated like passwords and connections watched and reviewed.

CY-BEGINNER-076Beginner · API Security

The Connections — Securing the Keys That Link Your Apps

Every time you connect one app to another, you create a door into your data. An API key is a password; each connection can do whatever access it was given. Know your connections, give the least access, keep keys secret, and revoke the unused.

11 hours8 chapters32 lessons225 activities8 labs

What you'll learn

Understand app connections as the keys and integrations wiring your apps together, and an API key as a password.
Know your connections, see each as a door into your data, and give each only the least access it needs.
Keep keys secret and treat a leaked key as a breach — replacing any key that may be exposed.
Remove old, unused connections, revoke a departed person's access, and watch and revoke over time.

Price:৳5,000