Explain the process of threat modeling a cloud-based payment processing API for Global Payment Holding.