Enhancing Cloud Security with API as a Product: Key Considerations