API endpoints

The process of engaging an OpenStack cloud is started through the querying of an API endpoint. While there are different challenges for public and private endpoints, these are high value assets that can pose a significant risk if compromised.

This chapter recommends security enhancements for both public and private-facing API endpoints.

• API endpoint configuration recommendations
  • Internal API communications
  • Paste and middleware
  • API endpoint process isolation and policy
  • API endpoint rate-limiting