1. Security Guide
  2. Security Considerations for Developers
  3. Securing REST APIs

Securing REST APIs

Using Session Monitor REST API, you can access most Operations Monitor features through HTTPS REST calls.

Session Monitor supports calling REST APIs using CA certificates.

Follow these guidelines to secure your API key:

  • Store the API key on an external system which has restricted access.

  • Perform only secured backups of the external system where the API key is stored.

  • Do not pass the API key on the command line.

  • Change the API key regularly.

For more information on how to enable and generate an API Key, and the use of certificates to call REST APIs, see the Operations Monitor User's Guide .