PersonIndependent
Martin Pankraz
Capabilities
Demonstrates
DestinationsCAPBTPUI5DestinationsReaching a system that is not yours — an S/4HANA tenant, an on-premise service, a third-party API — without the address, the credentials or the tunnel being written into the application. The destination is the indirection, and the reason an endpoint can move without a redeploy.
Entries
Group by
EntrySignals
Maintains: samples, sketches and references
az-private-linky-capaz-private-linky-capA CAP project reaching an S/4 backend through SAP BTP Private Link Service for Azure, with the private hostname and the credentials held in a destination.independent, cap
Neither the package manifest nor the repository tree declares a licence.
CAP project reaching S/4 via SAP BTP Private Link Service for Azure
Writing and topics
Piece, what it offersStill applies
Nice patch SAP! Revisiting your SAP BTP security measures after AI Core vulnerability fixNice patch SAP! Revisiting your SAP BTP security measures after AI Core vulnerability fixWritten after the SAPwned disclosure in SAP AI Core, it argues SAP BTP's shared-responsibility model still requires the customer's own hardening: scope SAP BTP, Cloud Foundry Runtime and SAP BTP, Kyma runtime app access, rotate OAuth2 client-credentials secrets, and enforce MFA and Conditional Access through a corporate identity provider rather than relying on SAP's patch alone. It then explains how the SAP Audit Log service writes standardized events for most Cloud Foundry BTP services, and walks through onboarding a BTP subaccount into Microsoft Sentinel for SAP BTP to query those logs with Kusto and build detection rules that flag unexpected login countries or known-bad IPs and trigger automatic user blocks.published 2024-07-25
Details
History
- First entry seenDiscovered via Added by hand.
Profile
For your agent
- Ref
actor:martinpankraz- JSON
- /actors/martinpankraz.json
- MCP
- Connecting an agent