Part 3: Securing north/south traffic with an API gateway