https://community.esri.com/t5/developers-ideas/add-api-key-usage-alarms-to-arcgis-developer-s/idi-p/1108452 <P>I propose that <STRONG>configurable usage alarms</STRONG> be provided <STRONG>for each API key </STRONG>that is created in the Developer's dashboard. Any number of metrics could be very useful, but something as simple as "alert me after 15,000 geocodes this month" would make API key maintenance and management much easier for ArcGIS developers.</P><P>According to the <A href="https://developers.arcgis.com/documentation/mapping-apis-and-services/security/security-best-practices/#api-key-security" target="_self">developers.arcgis.com documentation regarding API Key Security</A>, there are a few best practices for avoiding abuse of our API keys. These practices include limiting public exposure, configuring allowed referrers, scoping your API key to just the required services, rotating your keys, and, perhaps most importantly,&nbsp;<STRONG>monitoring usage</STRONG>.</P><P>Most of the best practices listed in the documentation are one-time development concerns. For example, I'll set up the referrer headers when I create the API key (or rotate it), then probably never think about it again. Usage monitoring, however, is <EM>not</EM> a set-it-and-forget-it concern.</P><P>Effective monitoring would require checking the dashboard quite vigilantly. Depending on a project's budget and the abuse the took place, the abnormal or abusive usage could be quite expensive by the time it is noticed. Further, as the number of apps under any individual developer's maintenance purview begins to grow, the expectation for manual usage monitoring becomes pretty unrealistic.</P><P>I believe this feature could really help avoiding unexpectedly large bills and/or damage to our systems.</P> Mon, 18 Oct 2021 15:40:22 GMT AndrewVitale 2021-10-18T15:40:22Z https://community.esri.com/t5/developers-ideas/add-api-key-usage-alarms-to-arcgis-developer-s/idi-p/1108452 <P>I propose that <STRONG>configurable usage alarms</STRONG> be provided <STRONG>for each API key </STRONG>that is created in the Developer's dashboard. Any number of metrics could be very useful, but something as simple as "alert me after 15,000 geocodes this month" would make API key maintenance and management much easier for ArcGIS developers.</P><P>According to the <A href="https://developers.arcgis.com/documentation/mapping-apis-and-services/security/security-best-practices/#api-key-security" target="_self">developers.arcgis.com documentation regarding API Key Security</A>, there are a few best practices for avoiding abuse of our API keys. These practices include limiting public exposure, configuring allowed referrers, scoping your API key to just the required services, rotating your keys, and, perhaps most importantly,&nbsp;<STRONG>monitoring usage</STRONG>.</P><P>Most of the best practices listed in the documentation are one-time development concerns. For example, I'll set up the referrer headers when I create the API key (or rotate it), then probably never think about it again. Usage monitoring, however, is <EM>not</EM> a set-it-and-forget-it concern.</P><P>Effective monitoring would require checking the dashboard quite vigilantly. Depending on a project's budget and the abuse the took place, the abnormal or abusive usage could be quite expensive by the time it is noticed. Further, as the number of apps under any individual developer's maintenance purview begins to grow, the expectation for manual usage monitoring becomes pretty unrealistic.</P><P>I believe this feature could really help avoiding unexpectedly large bills and/or damage to our systems.</P> Mon, 18 Oct 2021 15:40:22 GMT https://community.esri.com/t5/developers-ideas/add-api-key-usage-alarms-to-arcgis-developer-s/idi-p/1108452 AndrewVitale 2021-10-18T15:40:22Z https://community.esri.com/t5/developers-ideas/add-api-key-usage-alarms-to-arcgis-developer-s/idc-p/1108962#M1101 <P>I agree. The dashboard should provide some basic tooling to assist with usage monitoring in the form of dashboard alerts and emails.</P> Tue, 19 Oct 2021 18:28:33 GMT https://community.esri.com/t5/developers-ideas/add-api-key-usage-alarms-to-arcgis-developer-s/idc-p/1108962#M1101 mpianka 2021-10-19T18:28:33Z https://community.esri.com/t5/developers-ideas/add-api-key-usage-alarms-to-arcgis-developer-s/idc-p/1120073#M1102 <P>this is a good feature and we will consider it for a future update.</P> Wed, 24 Nov 2021 19:43:09 GMT https://community.esri.com/t5/developers-ideas/add-api-key-usage-alarms-to-arcgis-developer-s/idc-p/1120073#M1102 John-Foster 2021-11-24T19:43:09Z https://community.esri.com/t5/developers-ideas/add-api-key-usage-alarms-to-arcgis-developer-s/idc-p/1178832#M1143 <P>For reference, this enhancement's ID in My Esri seems to be ENH-000149064.</P> Tue, 31 May 2022 23:05:21 GMT https://community.esri.com/t5/developers-ideas/add-api-key-usage-alarms-to-arcgis-developer-s/idc-p/1178832#M1143 ZianChoy 2022-05-31T23:05:21Z