How to Route HCM REST API calls through OCIs API Gateway and disable direct access to HCM REST APIs
Currently, external systems invoke Oracle Cloud HCM REST APIs directly, bypassing centralized control and protection mechanisms. This direct access exposes Cloud HCM to several risks, including:
- Lack of rate limiting and throttling, increasing vulnerability to abuse and denial-of-service attacks.
- Absence of load balancing, which can lead to performance bottlenecks and uneven traffic distribution.
To mitigate these risks, we are exploring the possibility of routing all external HCM REST API calls through Oracle Cloud Infrastructure (OCI) API Gateway. This would ensure that all traffic is subject to standardized protections such as authentication, rate limiting, and monitoring, while disabling direct API access to Cloud HCM.
0