SAP Cloud Connector - API Management Security

[#1]

Hi experts,

From just a security standpoint, what additional benefits SAP API Management brings on top of SAP Cloud Connector for exposing on premise backend SAP Gateway services for further consumption by UI5 apps deployed in SAP BTP?

I am just interested in security topics (SAP APIM brings other benefits as for example API Discovery, Caching, or Analytics but these are out of the scope for this discussion). The idea is trying to understand if there is any additional benefit in the security space if we the service calls go UI5 --> API M --> SAP CC --> SAP GW instead of UI5 --> SAP CC --> SAP GW.

SAP Cloud Connector creates a TLS tunnel between SAP BTP and the on-premise landscape and given that in the data exchanges the host of the SAP Cloud Connector is not used, no DDoS can occur. So we are wondering what additional security can be added in SAP APIM that is not already provided in SAP Cloud Connector.

Many thanks!

C.

[Sriprasadsbhat]

Hello Charles,

Below might help you to get more details on usage of SAP API management.

https://blogs.sap.com/2020/06/28/sap-cloud-platform-api-management-mini-security-series/

Regards,

Sriprasad Shivaram Bhat

[Cristian]

Many thanks @Sriprasad Shivaram Bhat

I am already aware of those blogs and how API Management works but that still does not give me the information I am after. The blogs perfectly define how implement different security scenarios in API Management but do not tell me about what extended security features I would get for exposing on premise SAP GW services in API Management in addition to the security provided by the Cloud Connector. More than the how I am more interested in the why.

Anyway, many thanks again for your reply.

Regards,

C.