“I had a basic understanding that you should obviously, like, your cloud environment should be secured, you should have the lowest possible permissions everywhere, you don't store your keys where they can be grasped, don't put them in code.”

Transcript evidence from Dmitry Sotnikov – REST API Security – there is no silver bullet.