Current API Gateway is Kong
Access request for the same account with multiple passwords in a given time span (brute force)
Call is successful but invalid scope was provided
Out of the ordinary number of valid requests
Excessive Number of Records for a Single Consumer [4B-2]
Valid tokens are trying to access operations that don't exist
IPs Trying to Access Services that Don't Exist [5B-2]
An unusual number of requests to sensitive operation from a single user
Response contains PII
Response contains PII