Governance Without Impediment: Meeting You Where You Are

In the era of Universal API Management, Apigee’s philosophy is simple: we should sit “in front of everything.” Whether you are managing a massive enterprise service mesh or deploying a focused microservice on Cloud Run, you need visibility, security, and control. Most importantly, you need tools that speak the language of the modern developer.

Today, that language is OpenAPI v3 (OASv3).

Previously, developers using Google Cloud’s API Gateway or Cloud Endpoints faced a friction point: to utilize API management features, they often had to downgrade their modern OASv3 specifications to OASv2. This created unnecessary integration debt and slowed down deployment velocity.

We are thrilled to announce that native support for OpenAPI v3 is Generally Available (GA) for both API Gateway and Cloud Endpoints.

Modern Standards, Distributed Control

This release is about ensuring that governance never impedes innovation. By enabling OASv3 support across our API management portfolio, we allow you to define the what (your API contract) and the how (your policies) in a single, modern, standard-compliant document.

You can now leverage Google-specific extensions directly within your OASv3 specs to enforce critical policies without needing to transform or downgrade your files.

What’s Inside: Native Policy Extensions

We have introduced a set of shared extensions that map your OASv3 definitions directly to Google Cloud’s Service config. Key capabilities available now include:

  • Telemetry & Observability: Use the x-google-api-management extension to define metrics (e.g., read-requests) and gain immediate visibility into your API’s usage patterns.

  • Reliability & Quotas: Protect your backend services from overload by configuring precise rate limits and quotas (e.g., requests per minute per project) directly in the spec using x-google-quota.

  • Security & Authentication: Seamlessly integrate API Key or OAuth2 flows using the x-google-auth extension, ensuring your endpoints are secure by design.

Why This Matters

By standardizing on OASv3, your APIs are no longer stranded on a “tech island”. They are better positioned to integrate with the broader Google Cloud ecosystem, including our rapidly evolving AI services. This update unblocks existing use cases and ensures that teams can move from prototype to production faster, with less rework and higher trust in their management tools.

Get Started

Support for OpenAPI v3 on API Gateway and Cloud Endpoints is live today. You can upload your OASv3 specs immediately and start deploying governed, secure APIs on API Gateway and Cloud Endpoints