cloud API protection