How do you secure APIs in cloud-native architectures?

Technical