Okay, so you are building or already have built some APIs that you need to protect. A key question to ask is how you will protect those APIs so that only legitimate traffic is accepted and processed. Perhaps you’ll deploy an API Gateway or perhaps you’ll embed the required security checking within the API itself.