If remote API is enabled by default, how to secure

Question

Hello,

If remote API is enabled by default how can this be secured?

Does the REST follow the security structure of my Cloud instance?

How do I prevent users to extract data via API/REST from my confluence instance?

Regards,

Alexander

Robert Massaioli _Atlassian_ · Answer

How do I prevent users to extract data via API/REST from my confluence instance?

What prevents your users from simply scraping pages that they can see?

Nic Brough -Adaptavist- · Answer

The REST API has the same security as the web-ui, it respects all the permissions etc.