Enforce Throttling and Resource Access Policies
Throttling allows you to limit the number of hits to an API during a given period of time, typically to protect your APIs from security attacks and your backend services from overuse, regulate traffic according to infrastructure limitations and to regulate usage for monetization. For information on different levels of throttling in WSO2 Cloud, see Throttling tiers.
This tutorial uses the PhoneVerification API, which has one resource, GET and POST methods to access it and a throttling policy enforced.
Before you begin, follow the Create and Publish an API to create and publish the PhoneVerification API and then the Invoke an API using cURL to subscribe to the API using the Bronze throttling tier.
After you created, published and subscribed to the API, let's see how the API Gateway enforces throttling and resource access policies to the API.