The city publishes a public API for street-closure data used by third-party apps. Which controls are essential?
Select an answer to reveal the explanation.
Short Explanation
A public street-closure API is still a door into city systems—lock it, check IDs, and don't let bots knock a million times a minute. Authn/z, rate limits, and input checks are the basics. Open data is not the same as open season.
Full Explanation
Public APIs require authentication and authorization appropriate to the data and actions exposed, rate limiting to mitigate abuse, and rigorous input validation. These controls protect availability, integrity, and confidentiality at the interface layer. API security is a core Domain 8 concern for modern municipal application architectures.