https://vulert.com/blog/securing-your-api-gateway-security-best-practices/