There are two fundamental strategies that security teams use to defend web applications, and they can be simply categorized as a positive or negative security model. These could also be thought of as a proactive or reactive approach to protecting your applications, respectively.

Targeted attacks are rightly considered to be one of the largest threats facing any organization. Such attacks can cost billions of dollars and cause sufficient damage to a company's reputation.

One of the easiest ways to get these protections is to use a cloud-based web application firewall, or WAF. WAFs can be used to validate all API requests made to the micro-services and serve as an additional layer of protection as your business evolves.