Chris Phillips’ Blog - API, Integration and Governance

Stop hardcoding secrets in your APIs! Learn how to build a reusable custom policy that seamlessly integrates HashiCorp Vault with IBM API Connect, transforming complex authentication and secret retrieval into a single, elegant policy call.

📦 Get the Code: The complete policy code, deployment scripts, and examples are available on GitHub: apiconnect-vault-integration

I know some of you have noticed I’ve been publishing less on my blog lately. The reason? Less travel, thanks to these little monsters. 🦖👶

Image description for accessibility: Photo shows a bearded Chris Phillips wearing glasses and a black t-shirt with a iSOA skull design, sitting with his two young blonde daughters. One daughter wears a light blue dress with colorful dinosaur prints, the other wears a light pink dress with unicorn prints. Both children have pacifiers. The setting appears to be a casual restaurant or café with other people visible in the background.

Thanks to my darling brother Prof Iain Phillips for the great photo of my little girls.

I’ll be the first to admit it: I wasn’t practicing what I preach. For someone who regularly writes about best practices, and keeping systems up to date, I had let my own Jekyll blog fall embarrassingly behind. My Jekyll version was ancient, my Ruby dependencies were outdated, and I had been ignoring the problem for far too long.

This is terrible. Not just because outdated software can have security vulnerabilities, but because it goes against everything I advocate for in my professional work. If I’m going to write about proper software maintenance and infrastructure management, I need to walk the walk.

So today, I decided enough was enough and (with a daughter asleep on top of me) it was time to update my blog’s Jekyll installation and get everything current. What followed was a journey through Ruby version management, dependency resolution, and the occasional head-scratching moment that reminded me why keeping things updated regularly is so much easier than letting them fall behind.

Here’s what I learned (well, re-learned) during the process.

Terraform is an excellent tool for managing infrastructure. I use it, I recommend it, and I’ve seen it work brilliantly in production environments. However, I’ve also seen teams try to force it into application deployment scenarios where it simply doesn’t belong. This article explains why Terraform should stay in its lane - infrastructure - and why your APIs deserve better.

It’s that time of year again when we all search for the perfect gifts for our loved ones. I’ve always believed in giving something creative and personal—whether it’s handmade by my kids or commissioned from talented friends and artists.

This year, I decided to commission a custom family portrait from Carlos Valarezo, a talented illustrator based in Ecuador. I provided him with a detailed brief and a collection of family photos, and he transformed them into the stunning artwork you see above.

Recently I have been working with IBM AppConnect Designer in Software and the connectors for LDAP and Active Directory.

There are three connectors that need to be considered here

• Microsoft Entra ID
• Microsoft Active Directory
• LDAP Request node