The size of the threat to cloud security shows there’s benefit in exploring whether restricting access can fully secure APIs, for example, with a defense-in-depth model that minimizes an organization’s attack surface.