Use a combination of authentication and authorization to control access.

Make sure your APIs are protected by encryption, especially when they’re in transit.

Ensure that you have the right tools for monitoring API activity. This includes security logs and analytics tools
https://t.co/3XbP0NRlM1