Section 26.255 Integrations and APIs Flashcards
Objective 4.7 Explain the importance of automation and orchestration related to secure operations
Integration
Combining subsystems or components into a single, functioning system
API (Application Programming Interface)
Set of rules and protocols used for building and integrating application software
■ Enable software developers to access functions or features of another application programmatically
API Communication
APIs facilitate communication between different parts of a microservice or service-oriented architecture
■ Allows automation of administration, management, and monitoring of services and cloud-based infrastructures
Common communication methods used by APIs
REST (Representational State Transfer)
○ REST uses standard HTTP methods, status codes, URIs, and MIME types for interactions
○ Primarily uses JSON for data transfer
○ Lightweight protocol suitable for integrating with existing websites
Common communication methods used by APIs
SOAP (Simple Object Access Protocol)
○ SOAP has a structured message format in XML
○ Known for robustness, additional security features, and transaction compliance
○ Suitable for enterprise-level web services with complex transactions and regulatory compliance requirements
Benefits of API Integrations
■ Improved efficiency and consistency
■ Allows direct integration of third-party applications into web applications
■ Reduces the need to build entire services from scratch
API Testing with CURL
CURL
A tool for transferring data to or from a server using various supported protocols
■ Commonly used protocols for API testing are HTTP and HTTPS
■ Use CURL to send data to an API and receive a response for testing
■ CURL allows sending data to an API and receiving a JSON response
■ Helpful for software developers and cybersecurity professionals, especially in penetration testing scenarios