Production model endpoints should enforce:

Question

Accepted Answer

Authentication/authorization, network controls, and audit logging appropriate to data sensitivity — Lock endpoints down: authn/z, network controls, audit logs.

Answer

Open anonymous access from the entire internet by default always

Answer

No TLS

Answer

Shared basic auth passwords in Slack only

Production model endpoints should enforce:

Short Explanation and Infographic

Full Explanation