3 ms·
This is a cool API but I wonder if something like Zapier would support redirecting their slack integration via your onsite proxy. > You can restrict access to
by AdamJacobMuller 3y ago
This is a cool API but I wonder if something like Zapier would support redirecting their slack integration via your onsite proxy.
> You can restrict access to external APIs in a more fine grained manner
I've done this very successfully for many APIs before. I've found weird things among providers where using AWS (or GCP or Azure) gives you crazy fine-grained access controls (which are great after you spend two days figuring out how to use them well), but, some of the low cost competitors have core services that work just as well but their APIs are entirely binary (either you have full access, or none) but by adding a thin API layer above that you can enable all sorts of useful things. Provider doesn't support R/O API keys for terraform plans? Just run a proxy which enables that. Provider won't allow you to give someone an API key which can only reboot VMs, but, not delete them? Just write a proxy which does.
Very powerful model if you adopt it well.
- mikeknoop 3y ago(Zapier co-founder) Perhaps the least known feature of Zapier is that you can use the dev platform (https://zapier.com/developer https://zapier.com/developer) to make your own private apps for any API (including internal/private services) and then sign requests with auth credentials. The dev platform even has a full WYSIWYG app builder! Then, anyone in your account can use the private app to make Zaps. Relevant to OP, all platform auth creds are secured and not exposed after initial setup. Separately, we just launched custom actions which allows anyone to extend existing public apps on Zapier with new endpoints (https://help.zapier.com/hc/en-us/articles/16277139110157-Create-a-Custom-Action https://help.zapier.com/hc/en-us/articles/16277139110157-Cre...)