How can we take complete backup from apigee edge?

[abhishekA07]

Our requirement is to take complete backup from apigee edge and I have admin access as well.

What steps I need to perform to get the backup of all the proxies, api products etc listed below.

• Api Proxies
• Shared Flows
• Api configurations
• Api products
• KVMs
• Apps
• Target Servers
• Keystores
• Cache
• Flow Hooks
• Users and Roles
  What format will the backup be in? And how can we restore the backup?

[razvanbulzan]

The fundamental concept, structure, and analogy remain consistent, but there are several distinctions between Apigee X and Apigee Edge:

1. User identity management for administrators and operators in Apigee X is regulated by GCP IAM and RBAC instead of Apigee's IAM and RBAC. Roles are now aligned with GCP roles, departing from Apigee-specific roles.
2. The previous VirtualHost concept has been replaced by environment groups and GCP External Load Balancer.
3. Apigee X introduces several new policies, including DialogFlow, CORS, DataCapture, ExternalCallout, and TraceCapture.
4. API Proxy revisions are now immutable once they are deployed.
5. In Apigee X, a maximum of 50 proxies can be deployed to a single environment.
6. The provisioning and setup process for Apigee X is now the responsibility of the user. Unlike Apigee Edge, where the Apigee ops team handled provisioning.
7. All Key-Value Maps (KVMs) are encrypted using encryption keys provided by the customer.
8. The Admin API endpoint has changed to apigee.googleapis.com, and the authentication method also requires OAuth tokens at all times.
9. For enterprises currently utilizing Apigee Edge, it's advisable to engage with a services partner to gain insights and assistance in developing a migration plan. Your Apigee account team might facilitate this discussion.|
   
   
   
   Also consider using the apigee-sackmesser it's available on github here: https://github.com/apigee/devrel/tree/main/tools/apigee-sackmesser
   
   Using a command similar to this might help: 

   sackmesser export --apigeeapi -u "$APIGEE_USER" -p "$APIGEE_PASS" -o "$APIGEE_ORG"

   
   Nevertheless this tool won't backup all of the information, the below mentioned are not backed up:

   Migration of encrypted KVM entries (can't be exported).

   Migration of Keystores (Certs can't be exported).

   Shared flow dependency resolution (if sf A uses sf B then sf B needs to be deployed before sf A).

   Export of specs.

   So with the above tool you can migrate Proxies, App keys and a few other data from Apigee Edge to Apigee X, but again, I would advise to contact your services partner to get educated and enabled on a migration plan.