Poisoned Pipeline / Mitigations / M1230

M1230

Secure API access control

Implement strong authentication and authorization mechanisms for accessing APIs, including the use of API keys, access tokens, or other secure mechanisms to ensure that only authorized users or applications can access internal APIs.

Applies to

• T0123 Exposed internal API

References

• https://cheatsheetseries.owasp.org/cheatsheets/REST_Security_Cheat_Sheet.html
• https://owasp.org/www-project-api-security/