Apigee X Interview: 50 API Proxies, One Security Layer — Shared Flow or Flow Hook?

realNameHidden

2 min read

·

Sep 16, 2026

--

Listen

Share

Press enter or click to view image in full size

For Non Medium Members read here for free : link

Your organization has 50 API proxies.

Every proxy needs the same:

• OAuth validation
• Common security headers
• Correlation ID
• Centralized logging
• Common fault handling

The team currently has duplicated policies in all 50 proxies.

How would you redesign this?

Explain:

1. Would you use a Shared Flow?
2. What is a Flow Hook?
3. Where would you attach the Shared Flow?
4. What’s the difference between calling a Shared Flow explicitly and using a Flow Hook?
5. What are the potential disadvantages or things you need to consider when using Flow Hooks?

Answer

Yes, I would use a Shared Flow because we have common functionality that needs to be applied across multiple API proxies.

Instead of duplicating OAuth validation, security headers, correlation ID generation, centralized logging, and common fault handling in all 50 proxies, I would…