Interview Guides

You’ve been asked to secure an internal API that processes sensitive customer data before broader internal adoption. The API is already used by a small set of services, so you need to improve security without causing avoidable disruption to dependent teams.
Walk me through how you would secure an internal API that processes sensitive customer data.