How would you secure APIs deployed in a cloud environment?

Situational