Techniques for api endpoint discovery

A non-transitory computer-readable medium storing a set of instructions for detection of an Application Programming Interface (API) endpoint in a cloud computing environment, the set of instructions comprising:

• one or more instructions that, when executed by one or more processors of a device, cause the device to:
• receive runtime data from a plurality of sensors, each sensor deployed on a workload in the cloud computing environment;
• extract a plurality of API calls from the received runtime data;
• detect an API path from an extracted API call of the plurality of API calls;
• initiate inspection of a workload associated with the API path to detect a software application related to the extracted API call;
• detect an API endpoint based on a result of the inspection and the detected API path, wherein the detected software application is a component of the API endpoint;
• execute a network access instruction based on the API endpoint over a first network which is external to the cloud computing environment;
• execute the network access instruction over a second network which is external to the cloud computing environment;
• and
• determine exposure of the API endpoint based on a first response from executing the network access instruction over the first network and a second response from executing the network access instruction over the second network.

A system for detection of an Application Programming Interface (API) endpoint in a cloud computing environment comprising:

• a processing circuitry;
• a memory, the memory containing instructions that, when executed by the processing circuitry, configure the system to:
• receive runtime data from a plurality of sensors, each sensor deployed on a workload in the cloud computing environment;
• extract a plurality of API calls from the received runtime data;
• detect an API path from an extracted API call of the plurality of API calls;
• initiate inspection of a workload associated with the API path to detect a software application related to the extracted API call;
• detect an API endpoint based on a result of the inspection and the detected API path, wherein the detected software application is a component of the API endpoint;
• execute a network access instruction based on the API endpoint over a first network which is external to the cloud computing environment;
• execute the network access instruction over a second network which is external to the cloud computing environment;
• and
• determine exposure of the API endpoint based on a first response from executing the network access instruction over the first network and a second response from executing the network access instruction over the second network.