Omni Gateway for APIs Workshop

Enterprise security must adapt to the underlying protocol rather than treating all traffic as basic HTTP: * Managed Envoy Runtime & REST Governance: Deploy a Managed Omni Gateway on CloudHub 2.0 and establish traffic throttling with edge Rate Limiting (mitigating OWASP API4: Unrestricted Resource Consumption). * Mutual TLS (mTLS): Configure zero-trust downstream certificate exchange and validation using Anypoint Secrets Manager, keystores, and truststores. * Legacy SOAP Modernization: Wrap legacy WSDL services behind clean gateway routes (/temp/v1) and enforce the SOAP Schema Validation policy as an edge XML firewall. * GraphQL & WebSocket Protection: Neutralize recursive query-of-death attacks and resolver over-fetching with GraphQL Operation Limits (Max Depth & Max Root Fields), and secure persistent real-time streaming sockets against connection exhaustion using AsyncAPI standards.

Centralized governance requires operational observability and continuous discovery of unmanaged or shadow APIs: * Granular Tracing & Automated Alerts: Inject DataWeave message logging policies to audit HTTP headers before and after backend calls, and configure Omni Platform Notifications to alert operations teams during traffic spikes or SLA breaches. * Multi-Cloud API Scanners: Connect the automated API Scanner to Amazon API Gateway to detect, inspect, and catalog distributed AWS workloads directly into Anypoint Exchange.

True API quality begins at design time and extends through friction-free consumer onboarding: * Design & Runtime Governance: Enforce OpenAPI Best Practice rulesets against API specifications to flag design flaws before publication, pairing automated spec compliance with runtime API Key Enforcement. * API Experience Hub (AEH): Build a branded, self-service developer portal powered by Salesforce Experience Cloud, enabling internal and external developers to discover APIs, test in interactive playgrounds, and request secure credentials.

As an introductory bridge to agentic architectures, explore how Omni Gateway extends beyond traditional consumers to secure generative AI and autonomous agents: * Zero-Code MCP Bridging: Dynamically convert OpenAPI definitions into agent-ready Model Context Protocol (MCP) tool schemas. * Zero-Trust Tool Scoping: Prune destructive endpoints (such as DELETE operations) at the gateway layer to enforce non-destructive agent execution. * Agent Identity & Token Optimization: Enforce standard Client ID credentials on agent connections and apply the MCP Tools Progressive Disclosure Policy to minimize LLM prompt context bloat and optimize token spend.