Credential authorizing access to a resource.

Credential identifying or authorizing API access.

Access control based on attributes and policies.

Set of exposed points that could be attacked.

Software detecting and removing malicious programs.

Cryptographically signing software artifacts.

Method used to gain unauthorized access.

List defining allowed or denied access.

Abbreviation for Access Control List.

Explicit list of permitted items.

Rule permitting an operation or access.

Evidence used to verify identity.

Service handling authentication requests.

Server issuing or validating authorization information.

Protection of application programming interfaces.

Verifying API client identity.

Controlling what an API client may do.

Maximum API requests allowed within a period.

Allocated amount of API usage.

Managing different versions of an API.

Process of retiring an API feature or version.

Defined agreement describing API behavior.

Formal description of API data structures.

Formal definition of API operations and behavior.

Reference describing how to use an API.

Application or developer using an API.

Application or organization exposing an API.

Network-accessible API operation location.

Entity exposed through an API.

Header indicating acceptable response formats.

HTTP header carrying authentication credentials.

DNS record mapping a name to an IPv4 address.

DNS record mapping a name to an IPv6 address.

DNS service providing official records for a zone.

A reusable solution for organizing software architecture.

Structure and organization of an application.

Sidecar acting as a proxy for external communication.