Google Apigee is an API management platform that helps organizations design, secure, deploy, monitor, and scale APIs. For more information, refer to the official Google Apigee documentation.
Integration Method: API
Tables: Detection Finding (5001), Cloud Resources Inventory Info (5023), Web Resources Activity (6001)
This integration supports the following events.
Description | |
|---|---|
Security Incident and Monitoring | Retrieves security incidents and security monitoring conditions from Google Apigee organizations and environments, including risk context, policy signals, and detection details for security operations. |
Reports and Stats | Retrieves report definitions and optimized traffic statistics from Google Apigee across organizations and environments, including API usage metrics, response insights, and reporting context for web resource activity analysis. |
Developer App and API Product Inventory | Retrieves the inventory of developer applications and associated API products in Google Apigee, including app metadata, product relationships, and configuration details for cloud resource inventory tracking. |
This integration supports the following versions.
Google Apigee API Version | v1 |
Note:
Google Apigee doesn’t follow a traditional versioning system. As of this document preparation, latest release was on July 16, 2026.
Prerequisites
The user should have a Google Cloud Platform (GCP) project created in their deployment.
The user should have a Google Cloud Service Account created from the Google Developers Console.
Configuration Overview
Generate a service account with the required scopes and its private key.
Add the Google Apigee data feed in the DataBee console with the following parameters:
DataBee Parameter
Google Cloud Identity Parameter
Client Email
Service account email id
Admin Email
Domain admin email id
Private Key
Private Key
Google Apigee Configuration
Setting Up the New Project
Login to your Google Cloud Platform console.
On your console click on your organization name in the navigation bar.
On “Select a resource” window click on NEW PROJECT.
On the “New Project” window, enter your project name and click on Create.
Setting Up the service account
Perform the following steps to set up Google Workspace credentials on your Google console:
Navigate to console.cloud.google.com, and log into the Google account where you want to set up your Google Workspace credentials.
Navigate to IAM & Admin > Service Accounts.
In the Service accounts, select CREATE SERVICE ACCOUNT > Service Accounts.
In Create service account, perform the following steps:
Name your service account and select Create and Continue.
Grant your Service Account Permissions by clicking on Select a role and search for apigee.readOnlyAdmin. Select the role and click Continue.
Under Principals with access grant users access to your service account.
Select Done.
Getting ClientID and Private Key
In the Service account details page for your new service account, perform the following steps:
Click on your newly created service account.
Navigate to the KEYS tab.
Select the JSON key type and click CREATE.
Save the key type as JSON file to your selected directory. Below is the sample private key.
Note:
Your new public/private key pair is generated and downloaded to your machine, and it serves as the only copy of this key. Please/Kindly store it in a secure place.
DataBee Configuration
Login to the DataBee UI, navigate to Data > Data Feeds and click the Add New Data Feed button.
Search for the Google Apigee and click it as shown below.
Click on the API Ingest option for the collection method.
Enter feed contact information and scroll down.
In the configuration details dialog, enter the following:
Authorization Method: Google OAuth2
API Base URL: This is the base URL that DataBee will interact with
Client Email: Paste the client_email which was copied earlier
Admin Email: If you have a separate Admin Email paste it, otherwise paste the same client_email which was copied earlier
Private Key: Paste the private_key which was copied earlier
Token URL: This is the token URL that DataBee will interact with
Event Types: Preselected for all the event types that integration pulls.
Click Submit.
Click Submit & Deploy to Production.
Troubleshooting Tips
If you’re facing invalid_client or unauthorized_client issues, this might be due to incorrect service account credentials. Ensure the private key is pasted correctly. Since you cannot view the key after the first time, re-create the service account key, paste it into a text editor to verify there are no spaces or unexpected characters, and reconfigure the Google Cloud Identity integration.
If you are facing a response code - 403, this might be due to missing permissions. Ensure that the service account has the required Cloud Identity roles and permissions as per the steps mentioned above.