API Request Rate Limit Should Be Limited
policy name: throttle_authenticated_api_not_enabled
severity: LOW
Description
Enabling authenticated request rate-limit on APIs reduces volume of requests, and prevents incidents of reduced quality-of-service or denial-of-service because of unnecessary or malicious high request volume.
Remediation
- Press Settings -> Network
- Expand ‘User and IP rate limit’ section
- Toggle ‘Enable authenticated API request rate limit’
- Press ‘Save Changes’