(
)
AC-3-b: Token scope management
AC-3: Access Enforcement
2. API orchestration security pattern [Control Realization]