We released an updated version of Advanced API Security. Fixed
Share
Services
## Announcement
**On October 4, 2024 we released an updated version of Advanced API Security.**
## Change
**Fixed:** Delay in score generation for Risk Assessment v2 with VPC-SC-enabled organizations only
In Risk Assessment v2, which is in [preview](https://cloud.google.com/products/#product-launch-stages), this issue has been resolved:
With VPC-SC-enabled organizations only, when generating scores for new organizations or scoring changes to included proxies, shared flows, and target server configurations, score generation could have take as much as three hours.
See the [Risk Assessment v2 customer documentation](https://cloud.google.com/apigee/docs/api-security/security-scores#risk-assessment-v2) for information on the functionality.
## Announcement
### hybrid v1.13.1
On October 4, 2024 we released an updated version of the Apigee hybrid software, 1.13.1.
* For information on upgrading, see [Upgrading Apigee hybrid to version 1.13.1](https://cloud.google.com/apigee/docs/hybrid/v1.13/upgrade).
* For information on new installations, see [The big picture](https://cloud.google.com/apigee/docs/hybrid/v1.13/big-picture).
## Feature
**Cassandra credential rotation in Vault**
Starting in version v1.3.1, You can set up automatic Cassandra credential rotation when your credentials are stored in Hashicorp Vault. See [Rotating Cassandra credentials in Hashicorp Vault](https://cloud.google.com/apigee/docs/hybrid/v1.13/rotating-cassandra-credentials-in-vault).
## Feature
**New data pipeline for analytics and debug with data residency**
Starting with Apigee Hybrid 1.13.1, Apigee Hybrid can use a new data pipeline to collect data for analytics and debug to allow various runtime components to write data directly to our control plane. This is required for installations using [data residency](https://cloud.google.com/apigee/docs/hybrid/v1.13/using-data-residency-with-apigee-hybrid).
For more information see:
* [Analytics and debug data collection with data residency](https://cloud.google.com/apigee/docs/hybrid/v1.13/data-collection-with-data-residency)
* [newDataPipeline](https://cloud.google.com/apigee/docs/hybrid/v1.13/config-prop-ref#newdatapipeline)
## Fix
| Bug ID | Description |
| ------------- | ------------------------------------------------------------------------------------------------- |
| **364282883** | **Remove check for dc-expansion flag and add timeout to multi-region seed host connection test.** |
| **362305438** | **You can now add additional env variables to the runtime component.** |
| **353527851** | **WebSocket connection drops when using VerifyJwt or OAuthV2 VerifyJWTAccessToken operations.** |
## Security
| Bug ID | Description |
| ------- | --------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
| **N/A** | **Security fixes for apigee-open-telemetry-collector.** This addresses the following vulnerability: [CVE-2024-36129](https://nvd.nist.gov/vuln/detail/CVE-2024-36129) |
What else is happening at Google Cloud Platform?
You can now set up AlloyDB clusters using a copy of your Cloud SQL for PostgreSQL backup
about 10 hours ago
Services
Share
If your GKE cluster was created before version 1.26, you can now migrate it to cgroupv2
about 13 hours ago
Services
Share
You can set up AlloyDB clusters using a copy of your Cloud SQL for PostgreSQL backup
about 14 hours ago
Services
Share
Read update
Services
Share