Access control lists
An access control list (ACL) is an important component of every key collection. It displays all endpoints, resources, and methods associated with your collection’s access control group. You can edit an ACL by specifying the private endpoints, resources, and methods accessible to API consumers who identify with keys from a collection. Private endpoints and resources require API key authentication. You define endpoint and resource privacy settings in the API Definitions application.
You can access an ACL by selecting the Access control list tab on the main key collection page.
The Enabled endpoints and resources section displays public and private endpoints and their associated resources across all versions. The endpoints and resources only show up on the ACL if they are registered under the same ACG as the key collection you are in. API keys are only required to access private endpoints and resources. Public elements are on the list just for informational purposes.
Each endpoint and resource is associated with a lock icon indicating its privacy status:
- A private endpoint or resource.
- A private endpoint that contains at least one public resource.
- A purely public endpoint or resource.
You can choose to show only private endpoints and resources by selecting the Hide public endpoints and resources check box.
The Path column shows either a base path on which your API serves content for endpoints or a combination of a base path followed by a resource path for resources.
The Status column shows the current status of each endpoint and resource on staging and production networks:
- An endpoint or resource is being activated or deactivated on the network.
- An endpoint or resource is active on the network.
- A method is available to the resource, but not enabled.
- A method is enabled for the resource.
When you select or deselect an entry in an ACL, a pending icon () appears next to the entry until the requested change is propagated to the Akamai network. Under the Selected column, you can see how many of each endpoint’s available resources are currently selected.