This skill provides comprehensive guidance for securing APIs at the gateway level using industry-leading platforms like Kong, AWS API Gateway, Azure APIM, and Apigee. It automates the configuration of essential security layers, including JWT authentication, rate limiting, schema validation against OpenAPI specifications, mutual TLS (mTLS), and WAF integration. It is specifically designed for developers and security engineers aiming to enforce a consistent defense-in-depth strategy across microservices by centralizing security policies before traffic ever reaches the backend.
