(
)
WAF
CM-7: Least Functionality
2. API inbound security pattern [Control Realization]