Skip to content

Kong Gateway

Comming Soon

This Integration is comming soon.

Integrating Kong Gateway with Escape's ASM enhances API management and security.

Discovered Resources

The Kong Gateway integration will automatically discover and inventory the following resources from your Kong Gateway:

  • Kong Services: Backend service definitions and configurations
  • Kong Routes: Route definitions mapping requests to services
  • Kong Plugins: Security and transformation plugins configured on services
  • API Endpoints: Exposed API endpoints and their configurations

These discovered resources will be automatically classified as Assets (APIs) in Escape's ASM, enabling continuous security monitoring and testing.

Create a Kong Gateway Personal Access Token

  1. Go to your Kong Admin UI (usually running on port 8002) and go to the Plugins section /plugins/key-auth/create?redirect=/plugins
  2. The official key-auth plugin documentation is available on the Official Kong Gateway Documentation.
  3. Do not change the default key_names apikey
  4. Then, list our your available consumers or add one :8001/consumers/, then copy the id of the consumer.
  5. Lastly, create the key for the consumer curl -X POST http://localhost:8001/consumers/$CONSUMER_ID/key-auth and copy the key from the JSON response.
  6. Paste the API key and the Admin API URL into Escape
  7. You're done! Your integration should sync right away.

Internal Networks and Services

When integrating with internal networks and services, you may need to:

  • Configure a Private Location
  • Whitelist FQDNs

For more information, see Private Locations.