The Akamai integration connects Escape ASM to your Akamai account. Escape pulls hostnames and APIs from Edge DNS, Property Manager, and API Definitions so they land in your inventory for monitoring and testing.

## Discovered Resources

Escape discovers and inventories:

- **Edge DNS hostnames**: Domains and records from zones managed in Akamai Edge DNS
- **Property Manager hostnames**: Customer-facing domains (`cnameFrom`) declared on Property Manager properties
- **API services**: REST APIs from Akamai API Definitions, including hosts, base paths, and endpoint methods

Discovered items become assets in Escape ASM (APIs, DNS hosts, web apps). Downstream fingerprinting can classify what each hostname serves.

### DNS-Zone Discovery

Escape uses the DNS-Zone Record Management API to list Edge DNS zones, then reads the recordsets in each zone. Record names that look like domains become DNS host assets. This covers DNS you manage in Akamai, including records that aren't tied to a Property Manager property.

### Property Manager Discovery

Escape walks Property Manager groups and properties, then collects each property's `cnameFrom` hostnames. Those domains become DNS host assets even when they aren't present as Edge DNS records in the same account.

### API Definition Discovery

Escape lists endpoints from the API Definitions API, then loads each endpoint version's resources (paths and HTTP methods). For every declared host and base path, Escape creates a structured REST API asset with its endpoints. Use this to inventory API routes and methods from Akamai API Gateway alongside discovered hostnames.

## Generate Akamai API Client Credentials

1. From the side menu, open [Identity &amp; Access](<https://control.akamai.com/apps/identity-management/>) under `Account Admin`.
2. Click `Create API Client`.
3. Choose the client type that fits your use case. Select `Advanced` if you need to set specific API permissions.
4. Under APIs, choose `Select APIs`, then enable these APIs with `READ-ONLY` access (use `Change API Restrictions` if needed):

   - `API Definition`: API and endpoint discovery
   - `Property Manager API`: Property hostname discovery
   - `DNS-Zone Record Management`: Edge DNS discovery
5. On the API Client details page, copy `client_secret`, `host`, `access_token`, and `client_token` into Escape ASM.

**Important**: Akamai shows `client_secret` only once during creation. Download or securely store the credential immediately.