Whenever you're ready, walk me through how you'd approach this.
Explain the security best practices you implement when exposing APIs to public traffic.