Back to Developer Roadmap

Restrict Private APIs

src/data/best-practices/api-security/content/restrict-private-apis.md

4.0613 B
Original Source

Restrict Private APIs

Private APIs should only be accessible from safe listed IPs

Private APIs should only be accessible from safe-listed IPs to ensure that only authorized users or systems can access the API. By restricting access to specific IP addresses, you can prevent unauthorized access from external networks or malicious actors. This can help to protect sensitive data and prevent attacks such as DDoS or brute-force attacks. Additionally, restricting access to safe-listed IPs can help to ensure the reliability and performance of the API by preventing excessive traffic from unauthorized sources.