---
title: "Google Apigee"
slug: "google-apigee"
updated: 2026-09-18T16:08:47Z
published: 2026-09-18T16:08:47Z
canonical: "docs.databee.buzz/google-apigee"
---

> ## Documentation Index
> Fetch the complete documentation index at: https://docs.databee.buzz/llms.txt
> Use this file to discover all available pages before exploring further.

# Google Apigee

Google Apigee is an API management platform that helps organizations design, secure, deploy, monitor, and scale APIs. For more information, refer to the official Google Apigee [documentation](https://docs.cloud.google.com/apigee/docs/reference/apis/apigee/rest).

**Integration Method**: API

**Tables**: Detection Finding (5001), Cloud Resources Inventory Info (5023), Web Resources Activity (6001)

This integration supports the following events.

| **Event** | **Description** |
| --- | --- |
| Security Incident and Monitoring | Retrieves security incidents and security monitoring conditions from Google Apigee organizations and environments, including risk context, policy signals, and detection details for security operations. |
| Reports and Stats | Retrieves report definitions and optimized traffic statistics from Google Apigee across organizations and environments, including API usage metrics, response insights, and reporting context for web resource activity analysis. |
| Developer App and API Product Inventory | Retrieves the inventory of developer applications and associated API products in Google Apigee, including app metadata, product relationships, and configuration details for cloud resource inventory tracking. |

This integration supports the following versions.

| Google Apigee API Version | v1 |
| --- | --- |

> [!NOTE]
> **Note:**
> 
> Google Apigee doesn’t follow a traditional versioning system. As of this document preparation, latest release was on [July 16, 2026](https://docs.cloud.google.com/apigee/docs/release-notes).

## Prerequisites

- The user should have a Google Cloud Platform (GCP) project created in their deployment.
- The user should have a Google Cloud Service Account created from the Google Developers Console.
- The user should have access to the DataBee console.

## Configuration Overview

1. Generate a [service account](/user-manual/docs/google-apigee#setting-up-the-service-account) with the required scopes and its private key.
2. Add the [Google Apigee data feed](/user-manual/docs/google-apigee#databee-configuration) in the DataBee console with the following parameters:

| **DataBee Parameter** | **Google Cloud Identity Parameter** |
| --- | --- |
| Client Email | Service account email id |
| Admin Email | Domain admin email id |
| Private Key | Private Key |

## Google Apigee Configuration

### Setting Up the New Project

1. Login to your [Google Cloud Platform console](https://console.cloud.google.com/).
2. On your console click on your organization name in the navigation bar. ![](https://cdn.document360.io/04e48772-4346-44a4-aa69-043eca42257c/Images/Documentation/google_apigee-image-jbxegont.png?sv=2026-02-06&spr=https&st=2026-10-30T12%3A48%3A08Z&se=2026-10-30T13%3A48%3A08Z&sr=c&sp=r&sig=WvanrUiUKiJCjr%2B2nSX9iiqivc%2Fxti2aTFQQE%2Bgq64I%3D)
3. On “Select a resource” window click on **NEW PROJECT**. ![](https://cdn.document360.io/04e48772-4346-44a4-aa69-043eca42257c/Images/Documentation/google_apigee-image-9v4c6dnc.png?sv=2026-02-06&spr=https&st=2026-10-30T12%3A48%3A08Z&se=2026-10-30T13%3A48%3A08Z&sr=c&sp=r&sig=WvanrUiUKiJCjr%2B2nSX9iiqivc%2Fxti2aTFQQE%2Bgq64I%3D)
4. On the “New Project” window, enter your project name and click on **Create**. ![](https://cdn.document360.io/04e48772-4346-44a4-aa69-043eca42257c/Images/Documentation/google_apigee-image-pxo4fan8.png?sv=2026-02-06&spr=https&st=2026-10-30T12%3A48%3A08Z&se=2026-10-30T13%3A48%3A08Z&sr=c&sp=r&sig=WvanrUiUKiJCjr%2B2nSX9iiqivc%2Fxti2aTFQQE%2Bgq64I%3D)

#### 

### Setting Up the service account

Perform the following steps to set up Google Workspace credentials on your Google console:

1. Navigate to **console.cloud.google.com**, and log into the Google account where you want to set up your Google Workspace credentials. ![](https://cdn.document360.io/04e48772-4346-44a4-aa69-043eca42257c/Images/Documentation/google_apigee-image-3cz89qaj.png?sv=2026-02-06&spr=https&st=2026-10-30T12%3A48%3A08Z&se=2026-10-30T13%3A48%3A08Z&sr=c&sp=r&sig=WvanrUiUKiJCjr%2B2nSX9iiqivc%2Fxti2aTFQQE%2Bgq64I%3D)
2. Navigate to **IAM** & **Admin** > **Service Accounts**. ![](https://cdn.document360.io/04e48772-4346-44a4-aa69-043eca42257c/Images/Documentation/google_apigee-image-gs1cz08x.png?sv=2026-02-06&spr=https&st=2026-10-30T12%3A48%3A08Z&se=2026-10-30T13%3A48%3A08Z&sr=c&sp=r&sig=WvanrUiUKiJCjr%2B2nSX9iiqivc%2Fxti2aTFQQE%2Bgq64I%3D)
3. In the **Service accounts**, select **CREATE SERVICE ACCOUNT** > **Service Accounts**. ![](https://cdn.document360.io/04e48772-4346-44a4-aa69-043eca42257c/Images/Documentation/google_apigee-image-w0dufaeu.png?sv=2026-02-06&spr=https&st=2026-10-30T12%3A48%3A08Z&se=2026-10-30T13%3A48%3A08Z&sr=c&sp=r&sig=WvanrUiUKiJCjr%2B2nSX9iiqivc%2Fxti2aTFQQE%2Bgq64I%3D)
4. In Create service account, perform the following steps:
  1. Name your service account and select **Create and Continue**. ![](https://cdn.document360.io/04e48772-4346-44a4-aa69-043eca42257c/Images/Documentation/google_apigee-image-jvtmjoz8.png?sv=2026-02-06&spr=https&st=2026-10-30T12%3A48%3A08Z&se=2026-10-30T13%3A48%3A08Z&sr=c&sp=r&sig=WvanrUiUKiJCjr%2B2nSX9iiqivc%2Fxti2aTFQQE%2Bgq64I%3D)
  2. Grant your Service Account Permissions by clicking on **Select a role** and search for **apigee.readOnlyAdmin**. Select the role and click **Continue**.

![](https://cdn.document360.io/04e48772-4346-44a4-aa69-043eca42257c/Images/Documentation/google_apigee-image-9hym57ad.png?sv=2026-02-06&spr=https&st=2026-10-30T12%3A48%3A08Z&se=2026-10-30T13%3A48%3A08Z&sr=c&sp=r&sig=WvanrUiUKiJCjr%2B2nSX9iiqivc%2Fxti2aTFQQE%2Bgq64I%3D)

![](https://cdn.document360.io/04e48772-4346-44a4-aa69-043eca42257c/Images/Documentation/google_apigee-image-ttg2iazq.png?sv=2026-02-06&spr=https&st=2026-10-30T12%3A48%3A08Z&se=2026-10-30T13%3A48%3A08Z&sr=c&sp=r&sig=WvanrUiUKiJCjr%2B2nSX9iiqivc%2Fxti2aTFQQE%2Bgq64I%3D)
  3. Under **Principals with access** grant users access to your service account. ![](https://cdn.document360.io/04e48772-4346-44a4-aa69-043eca42257c/Images/Documentation/google_apigee-image-wi2c408n.png?sv=2026-02-06&spr=https&st=2026-10-30T12%3A48%3A08Z&se=2026-10-30T13%3A48%3A08Z&sr=c&sp=r&sig=WvanrUiUKiJCjr%2B2nSX9iiqivc%2Fxti2aTFQQE%2Bgq64I%3D)
  4. Select **Done**.

### Getting ClientID and Private Key

1. In the Service account details page for your new service account, perform the following steps:
  1. Click on your newly created service account. ![](https://cdn.document360.io/04e48772-4346-44a4-aa69-043eca42257c/Images/Documentation/google_apigee-image-ku8i2fas.png?sv=2026-02-06&spr=https&st=2026-10-30T12%3A48%3A08Z&se=2026-10-30T13%3A48%3A08Z&sr=c&sp=r&sig=WvanrUiUKiJCjr%2B2nSX9iiqivc%2Fxti2aTFQQE%2Bgq64I%3D)
  2. Navigate to the **KEYS** tab.
  3. Select **ADD KEY** > **Create new key**. ![](https://cdn.document360.io/04e48772-4346-44a4-aa69-043eca42257c/Images/Documentation/google_apigee-image-i6vrgc0x.png?sv=2026-02-06&spr=https&st=2026-10-30T12%3A48%3A08Z&se=2026-10-30T13%3A48%3A08Z&sr=c&sp=r&sig=WvanrUiUKiJCjr%2B2nSX9iiqivc%2Fxti2aTFQQE%2Bgq64I%3D)
  4. Select the **JSON** key type and click **CREATE**. ![](https://cdn.document360.io/04e48772-4346-44a4-aa69-043eca42257c/Images/Documentation/google_apigee-image-aux3v49b.png?sv=2026-02-06&spr=https&st=2026-10-30T12%3A48%3A08Z&se=2026-10-30T13%3A48%3A08Z&sr=c&sp=r&sig=WvanrUiUKiJCjr%2B2nSX9iiqivc%2Fxti2aTFQQE%2Bgq64I%3D)
  5. Save the key type as JSON file to your selected directory. Below is the sample private key. ![](https://cdn.document360.io/04e48772-4346-44a4-aa69-043eca42257c/Images/Documentation/google_apigee-image-ydi21zjv.png?sv=2026-02-06&spr=https&st=2026-10-30T12%3A48%3A08Z&se=2026-10-30T13%3A48%3A08Z&sr=c&sp=r&sig=WvanrUiUKiJCjr%2B2nSX9iiqivc%2Fxti2aTFQQE%2Bgq64I%3D)

> [!NOTE]
> **Note:**
> 
> Your new public/private key pair is generated and downloaded to your machine, and it serves as the only copy of this key. Please/Kindly store it in a secure place.

## DataBee Configuration

1. Login to the DataBee UI, navigate to **Data** > **Data Feeds** and click the **Add New Data Feed** button. ![](https://cdn.document360.io/04e48772-4346-44a4-aa69-043eca42257c/Images/Documentation/google_apigee-image-otpypzj8.png?sv=2026-02-06&spr=https&st=2026-10-30T12%3A48%3A08Z&se=2026-10-30T13%3A48%3A08Z&sr=c&sp=r&sig=WvanrUiUKiJCjr%2B2nSX9iiqivc%2Fxti2aTFQQE%2Bgq64I%3D)
2. Search for the **Google Apigee** and click it as shown below. ![](https://cdn.document360.io/04e48772-4346-44a4-aa69-043eca42257c/Images/Documentation/google_apigee-image-cj2yu8bf.png?sv=2026-02-06&spr=https&st=2026-10-30T12%3A48%3A08Z&se=2026-10-30T13%3A48%3A08Z&sr=c&sp=r&sig=WvanrUiUKiJCjr%2B2nSX9iiqivc%2Fxti2aTFQQE%2Bgq64I%3D)
3. Click on the **API Ingest** option for the collection method. ![](https://cdn.document360.io/04e48772-4346-44a4-aa69-043eca42257c/Images/Documentation/google_apigee-image-3fnpwify.png?sv=2026-02-06&spr=https&st=2026-10-30T12%3A48%3A08Z&se=2026-10-30T13%3A48%3A08Z&sr=c&sp=r&sig=WvanrUiUKiJCjr%2B2nSX9iiqivc%2Fxti2aTFQQE%2Bgq64I%3D)
4. Enter **feed contact information** and scroll down. ![](https://cdn.document360.io/04e48772-4346-44a4-aa69-043eca42257c/Images/Documentation/google_apigee-image-mbx8yjft.png?sv=2026-02-06&spr=https&st=2026-10-30T12%3A48%3A08Z&se=2026-10-30T13%3A48%3A08Z&sr=c&sp=r&sig=WvanrUiUKiJCjr%2B2nSX9iiqivc%2Fxti2aTFQQE%2Bgq64I%3D)
5. In the configuration details dialog, enter the following:
  - **Authorization Method**: Google OAuth2
  - **API Base URL:** This is the base URL that DataBee will interact with
  - **Client Email**: Paste the client_email which was copied earlier
  - **Admin Email**: If you have a separate Admin Email paste it, otherwise paste the same client_email which was copied earlier
  - **Private Key**: Paste the private_key which was copied earlier
  - **Token URL**: This is the token URL that DataBee will interact with
  - **Event Types**: Preselected for all the event types that integration pulls.
6. Click **Submit**.

![](https://cdn.document360.io/04e48772-4346-44a4-aa69-043eca42257c/Images/Documentation/google_apigee-image-8k7i73hd.png?sv=2026-02-06&spr=https&st=2026-10-30T12%3A48%3A08Z&se=2026-10-30T13%3A48%3A08Z&sr=c&sp=r&sig=WvanrUiUKiJCjr%2B2nSX9iiqivc%2Fxti2aTFQQE%2Bgq64I%3D)
7. Click **Submit & Deploy to Production**. ![](https://cdn.document360.io/04e48772-4346-44a4-aa69-043eca42257c/Images/Documentation/google_apigee-image-e54skgo4.png?sv=2026-02-06&spr=https&st=2026-10-30T12%3A48%3A08Z&se=2026-10-30T13%3A48%3A08Z&sr=c&sp=r&sig=WvanrUiUKiJCjr%2B2nSX9iiqivc%2Fxti2aTFQQE%2Bgq64I%3D)

# 

## Troubleshooting Tips

- If you’re facing **invalid_client** or **unauthorized_client** issues, this might be due to incorrect **service account credentials**. Ensure the **private key** is pasted correctly. Since you cannot view the key after the first time, re-create the **service account key**, paste it into a text editor to verify there are no spaces or unexpected characters, and reconfigure the **Google Cloud Identity integration**.
- If you are facing a **response code - 403**, this might be due to **missing permissions**. Ensure that the **service account** has the required **Cloud Identity roles and permissions** as per the steps mentioned above.