A bluebell-wood public API behind API Management is being scraped. How should the developer throttle callers without coding a counter inside the Function?
Select an answer to reveal the explanation.
Short Explanation
Throttling belongs at the gateway. Drop rate-limit, rate-limit-by-key, or quota on inbound in APIM and leave the Function free of homemade counters.
Full Explanation
API Management provides rate-limit, rate-limit-by-key, and quota policies typically applied inbound so excessive callers are rejected before the backend runs. Coding counters in the Function, opening Redis anonymously, rebooting VMs, or treating Front Door WAF as the AZ-204 APIM answer are not the gateway throttling pattern.