Maintained with ☕️ by
IcePanel logo

We released an updated version of Advanced API Security. Fixed

Share

Services

## Announcement **On October 4, 2024 we released an updated version of Advanced API Security.** ## Change **Fixed:** Delay in score generation for Risk Assessment v2 with VPC-SC-enabled organizations only In Risk Assessment v2, which is in [preview](https://cloud.google.com/products/#product-launch-stages), this issue has been resolved: With VPC-SC-enabled organizations only, when generating scores for new organizations or scoring changes to included proxies, shared flows, and target server configurations, score generation could have take as much as three hours. See the [Risk Assessment v2 customer documentation](https://cloud.google.com/apigee/docs/api-security/security-scores#risk-assessment-v2) for information on the functionality. ## Announcement ### hybrid v1.13.1 On October 4, 2024 we released an updated version of the Apigee hybrid software, 1.13.1. * For information on upgrading, see [Upgrading Apigee hybrid to version 1.13.1](https://cloud.google.com/apigee/docs/hybrid/v1.13/upgrade). * For information on new installations, see [The big picture](https://cloud.google.com/apigee/docs/hybrid/v1.13/big-picture). ## Feature **Cassandra credential rotation in Vault** Starting in version v1.3.1, You can set up automatic Cassandra credential rotation when your credentials are stored in Hashicorp Vault. See [Rotating Cassandra credentials in Hashicorp Vault](https://cloud.google.com/apigee/docs/hybrid/v1.13/rotating-cassandra-credentials-in-vault). ## Feature **New data pipeline for analytics and debug with data residency** Starting with Apigee Hybrid 1.13.1, Apigee Hybrid can use a new data pipeline to collect data for analytics and debug to allow various runtime components to write data directly to our control plane. This is required for installations using [data residency](https://cloud.google.com/apigee/docs/hybrid/v1.13/using-data-residency-with-apigee-hybrid). For more information see: * [Analytics and debug data collection with data residency](https://cloud.google.com/apigee/docs/hybrid/v1.13/data-collection-with-data-residency) * [newDataPipeline](https://cloud.google.com/apigee/docs/hybrid/v1.13/config-prop-ref#newdatapipeline) ## Fix | Bug ID | Description | | ------------- | ------------------------------------------------------------------------------------------------- | | **364282883** | **Remove check for dc-expansion flag and add timeout to multi-region seed host connection test.** | | **362305438** | **You can now add additional env variables to the runtime component.** | | **353527851** | **WebSocket connection drops when using VerifyJwt or OAuthV2 VerifyJWTAccessToken operations.** | ## Security | Bug ID | Description | | ------- | --------------------------------------------------------------------------------------------------------------------------------------------------------------------- | | **N/A** | **Security fixes for apigee-open-telemetry-collector.** This addresses the following vulnerability: [CVE-2024-36129](https://nvd.nist.gov/vuln/detail/CVE-2024-36129) |