Security feedback API

This page applies to Apigee and Apigee hybrid.

View Apigee Edge documentation.

The security feedback API lets you specify and manage lists of attributes to exclude from abuse detection and incident reporting. For additional information, see Exclude traffic from abuse detection.

This page provides an example of setting up an exclusion list. See the SecurityFeedback API reference page for information on all of the options and responses available with this API.

Example: Exclude traffic from abuse detection using an exclusion list

The following example adds a CIDR range, 192.168.1.0/24, and an IP address, 10.0.0.1, to a new exclusion list so that the traffic from those addresses will not be included in detections and incident reports.

For the example ORG is your Apigee organization.

curl "https://apigee.googleapis.com/v1/organizations/ORG/securityFeedback" \
       -H "Authorization: Bearer $TOKEN" \
       -X POST \
       -H "Content-Type: application/json" \
       -d '{
       "displayName": "My Feedback List",
       "feedbackContexts": [
         {
           "attribute": "ATTRIBUTE_IP_ADDRESS_RANGES",
           "values": ["192.168.1.0/24", "10.0.0.1"]
         },
         {
           "attribute": "ATTRIBUTE_ENVIRONMENTS",
           "values": ["prod"]
         }
       ],
       "feedbackType": "EXCLUDED_DETECTION",
       "reason": "PENETRATION_TEST",
       "comment": "Testing feedback API"
    }'