cloud API protection

API trust boundaries