When it comes to cloud computing, APIs more or less drive everything, but in the eyes of some researchers, existing security controls around them haven t kept pace. Erik Peterson, a cloud technology researcher with Veracode, described the Emergent Insecurity of the cloud in a talk Wednesday at the Source Conference in Boston. API access is the new equivalent to physical access, Peterson said, If someone compromises your most sensitive API credential, it doesn’t matter .
Source: https://threatpost.com/protecting-cloud-apis-critical-to-mitigating-total-compromise/118197/