Skip to main content

How to scan an Akamai connection for Asset Discovery

Connect your Akamai account to Snyk API & Web to discover and scan your APIs.

Written by Ana Pascoal

APIs often operate without the direct oversight of security teams, making them difficult to track and protect. To run a security scan on an API, you first need its specification file (schema), but finding the correct, up-to-date schema for every API in your organization can be a significant challenge.

This guide shows you how to connect your Akamai account to Snyk API & Web. This integration automatically discovers the APIs managed in your Akamai account and imports their schemas, allowing you to quickly add them as targets in Snyk API & Web with a single click.

Prerequisites

Before you start, you will need administrator access to your organization's Akamai API Security portal to retrieve the required API credentials.

Step 1: Get your Akamai API credentials

To allow Snyk API & Web to access your assets, you need to obtain API credentials from your Akamai API Security tenant.

  1. Log into the Akamai API Security portal.

  2. From your account's main navigation menu, select Settings.

  3. From the Settings menu, select User Management.

  4. Select the Service Accounts tab.

  5. Click the Create Service Account button to open the configuration form.

  6. Enter a name and a duration, then click Save.

  7. Copy the following two values displayed in the Service Account Credentials window and save them in a secure location:

    • Client ID

    • Client Secret

Important: The Client Secret is shown only once. Ensure you copy it before leaving the page. You will need these credentials for the next step.

Step 2: Add the Akamai connection in Snyk API & Web

Now, use the credentials you just created to connect your Akamai account in the Snyk API & Web application. You can do this from either the global Integrations page or the Discovery menu entry.

Option A: From the Integrations Page

  1. In your Snyk API & Web account, go to Settings > Integrations.

  2. Locate the Akamai integration module.

  3. Enter your credentials obtained from Akamai:

    • Akamai Server URL

    • Akamai Client ID

    • Akamai Client Secret

  4. Click Save.

Option B: From the Discovery Tab

  1. In your Snyk API & Web account, go to the Discovery menu entry.

  2. Click Add source.

  3. From the list of sources, select Akamai.

  4. Enter your credentials obtained from Akamai:

    • Akamai Server URL

    • Akamai Client ID

    • Akamai Client Secret

  5. Click Connect.

View your discovered assets

After a successful connection, Snyk API & Web immediately begins importing your domains from Akamai. This process runs periodically to keep your inventory up to date.

You can view these domains by going to Targets > Domains. Once your domains are imported, Snyk API & Web automatically runs a discovery scan on them to find the associated APIs. After this scan is complete, your discovered assets are listed under the Discovery menu entry. For each API, a {...} icon is displayed to indicate that its schema is available.

Next steps: add a discovered API as a target

Once your API assets appear in the Discovery list, you can add them as targets.

  1. Go to the Discovery menu entry.

  2. To find specific API assets, use the following filters:

    • Filter by Type > API to display only API assets.

    • Filter by Source > Akamai to display assets imported from this integration.

  3. Click the Add Target button on the corresponding row.

Snyk API & Web automatically configures the API as a new target with its schema pre-populated, making it ready for security testing. Once you add the asset as a target, press the Scan button to get started.

Did this answer your question?