Today I will share the thinking you should adopt designing API considering the attack surface, the mandatory reasoning behind adopting an API Gateway and how critical is the tuning. I will share an overview of the main differences across type of API, sharing good resources.