# Apigee API Management

## Manage APIs with unmatched scale, security, and performance

Google Cloud’s native API management tool to build, manage, and secure APIs—for any use case, environment, or scale.

Get started free [Get started free](https://console.cloud.google.com/freetrial/?redirectPath=/apigee)

### Product highlights

- [Automated controls powered by AI/ML to build and secure APIs](https://cloud.google.com/apigee?authuser=1#features)
- [Support for REST, SOAP, GraphQL, or gRPC architectural styles](https://cloud.google.com/apigee?authuser=1#how-it-works)
- [Flexibility to choose pay-as-you-go or subscription pricing](https://cloud.google.com/apigee?authuser=1#pricing)

## Using Gemini Code Assist in Apigee API Management

Create consistent quality APIs without any specialized expertise. Now generally available, [Gemini Code Assist in Apigee](https://cloud.google.com/blog/products/api-management/gemini-code-assist-for-apigee-api-management) leverages your organization's API ecosystem through API hub to provide uniquely tailored assistance. Generate OpenAPI specifications from natural language in both Cloud Code and now Gemini Chat with @mention functionality. Benefit from improved Enterprise Context with nested object support and proactive duplicate API prevention. You can further slash development time by generating mock servers for parallel development and collaborate through seamless publishing to API hub. Gemini Code Assist in Apigee is available as part of the Gemini Code Assist Enterprise subscription.

### Universal catalog for your APIs

Consolidate API specifications—built or deployed anywhere—into API hub. Built on open standards, API hub is a universal catalog that allows developers to access APIs and govern them to a consistent quality. Using autogenerated recommendations provided by Gemini, you can create assets like API proxies, integrations, or even plugin extensions that can be deployed to Gemini Enterprise Agent Platform or ChatGPT.

### Automated API Security with ML based abuse detection

Advanced API Security detects [undocumented and unmanaged APIs](https://cloud.google.com/blog/products/api-management/track-down-shadow-apis-with-apigee) linked to Google Cloud L7 Load Balancers. Advanced API Security also regularly assesses managed APIs, [surfaces API proxies](https://cloud.google.com/apigee/docs/api-security#identifying-api-misconfigurations) that do not meet security standards, and provides recommended actions when issues are detected. [ML-powered dashboards](https://cloud.google.com/apigee/docs/api-security/abuse-detection) accurately identify critical API abuses by finding patterns within the large number of bot alerts, reducing the time to act on important incidents.

### High-performance API proxies

Orchestrate and manage traffic for demanding applications with unparalleled control and reliability. Apigee supports styles like [REST](https://cloud.google.com/apigee/docs/api-platform/fundamentals/understanding-apis-and-api-proxies), [gRPC](https://cloud.google.com/apigee/docs/api-platform/reference/policies/external-callout-policy), [SOAP](https://cloud.google.com/apigee/docs/api-platform/reference/policies/message-validation-policy), and [GraphQL](https://cloud.google.com/apigee/docs/api-platform/reference/policies/graphql-policy), providing flexibility to implement any architecture. Using Apigee, you can also proxy internal microservices managed in a service mesh as REST APIs to enhance security.

### Hybrid/multicloud deployments

Achieve the architectural freedom to deploy your APIs anywhere—in your own data center or public cloud of your choice—by configuring Apigee hybrid. Host and manage containerized runtime services in your own Kubernetes cluster for greater agility and interoperability while managing APIs consistently with Apigee.

### Traffic management and control policies

Apigee uses policies on API proxies to program API behavior without writing any code. Policies provided by Apigee allow you to add common functionality like security, rate limiting, transformation, and mediation. You can configure from a robust set of 50+ policies to gain control on behavior, traffic, security, and QoS of every API. You can even write custom scripts and code (such as JavaScript applications) to extend API functionality.

### Developer portals integrated into API life cycle

Bundle individual APIs or resources into [API products](https://cloud.google.com/apigee/docs/api-platform/publish/create-api-products)—a logical unit that can address a specific use case for a developer. Publish these API products in out-of-the-box [integrated developer portals](https://cloud.google.com/apigee/docs/api-platform/publish/intro-portals#integrated-portal) or customized experiences built on [Drupal](https://cloud.google.com/apigee/docs/api-platform/publish/intro-portals#drupal). Drive adoption of your API products with easy onboarding of partners/developers, secure access to your APIs, and engaging experiences without any administrative overhead.

### Built-in and custom API analytics dashboards

Use built-in dashboards to investigate spikes, improve performance, and identify improvement opportunities by analyzing critical information from your API traffic. Build [custom dashboards](https://cloud.google.com/apigee/docs/api-platform/analytics/analytics-services-overview) to analyze API quality and developer engagement to make informed decisions.

### Near real-time API monitoring

Investigate every detail of your API transaction within the console or in any distributed tracing solution by debugging an API proxy flow. Isolate problem areas quickly by monitoring their performance or latency. Use [Advanced API Operations](https://cloud.google.com/apigee/docs/aapi-ops) to identify anomalous traffic patterns and get notified on unpredictable behaviors without any alert fatigue or overheads.

### API monetization

Create [rate plans](https://cloud.google.com/apigee/docs/api-platform/monetization/manage-rate-plans) for your API products to monetize your API channels. Implementing business models of any complexity by configuring billing, payment model, or revenue share with granular details.

### Options table

| Product | Description | When to use this product? |
| --- | --- | --- |
| [Apigee](https://cloud.google.com/apigee/docs/getstarted) | Fully managed comprehensive solution to build, manage, and secure APIs—for any use case or scale | Managing high value/volume of APIs with enterprise-grade security and dev engagement |
| [Apigee hybrid](https://cloud.google.com/apigee/docs/hybrid/latest/what-is-hybrid) | Comprehensive API management for use in any environment—on-premises or any cloud | Maintaining and processing API traffic within your own kubernetes cluster |
| [Cloud Endpoints](https://cloud.google.com/endpoints) | Customer managed service to run co-located gateway or private networking | Managing gRPC services with locally hosted gateway for private networking |
| [API Gateway](https://cloud.google.com/api-gateway) | Fully managed service to package serverless functions as REST APIs | Building proof-of-concepts or entry-level API use cases to package serverless applications running on Google Cloud |

### How It Works

Apigee provides an abstraction or facade for your backend services by fronting services with API proxies. Using these proxies you can control traffic to your backend services with granular controls like security, rate limiting, quotas, and much more.

### Common Uses

#### Cloud-first application development

Use APIs to build modern applications and architectures.

#### Modernize legacy apps and architectures

Package legacy applications using RESTful interfaces.

### New business channels and opportunities

Publish and monetize your API products in developer portals.

### Web application and API security

Implement security in multiple layers with advanced controls.

### FAQ

#### Why is an API used?

APIs enable seamless communication between applications, servers, and users in today's tech-driven world. As their numbers grow, API management has become crucial, encompassing design, development, testing, deployment, governance, security, monitoring, and monetization within the software development life cycle.

#### What is a RESTful API?

RESTful APIs adhere to REST (Representational State Transfer) architecture constraints. Following these architecture constraints enables APIs to offer scalability, speed, and data versatility. An API of this kind accesses data by using HTTP requests and is the most common type of API used in modern applications today.

#### What makes Apigee different from other API management solutions?

Apigee is Google Cloud’s fully managed API management solution. Trusted by enterprises across the globe, Apigee is developer-friendly and provides comprehensive capabilities to support diverse API architectural styles, deployment environments, and use cases. Apigee also provides flexible pricing options for every business to get started and become successful on the platform.

#### Which API protocols does Apigee support?

Apigee currently supports REST, SOAP, GraphQL, gRPC, or OpenAPI protocols.

#### Why should you secure your APIs?

Companies worldwide rely on application programming interfaces, or APIs, to facilitate digital experiences and unleash the potential energy of their own data and processes. But the proliferation and importance of APIs come with a risk. As a gateway to a wealth of information and systems, APIs have become a favorite target for hackers. Due to the prevalence of such attacks, there is a need for a proactive approach to secure APIs.

#### What makes an API secure?

Apigee helps organizations stay ahead of security threats by offering protection in three layers:

1. Robust policies that protect every API transaction from unauthorized users.
2. Advanced API security provides automated controls to identify API misconfigurations, malicious bot attacks, and anomalous traffic patterns without overhead and alert fatigue. Web application and API security based on the same technology used by Google to protect its public-facing services against web application vulnerabilities, DDoS attacks, fraudulent bot activity, and API-targeted threats. Google Cloud WAAP combines three solutions (Apigee, [Cloud Armor](https://cloud.google.com/armor), and [reCAPTCHA Enterprise](https://cloud.google.com/recaptcha-enterprise)) to provide comprehensive protection against threats and fraud.