Apply policies in API Manager: This video explains you below:
1. Client id enforcement
1. Create client application for the API in exchnge
2. Use client and client secret to consume this API
2. CORS (Cross-Origin resource sharing)
3. Rate Limiting
4. Rate Limiting SLA Based