SFS C / SF 6

Back to SFS C

Status: Question model review passed; solution and completed SF authoring pending.

This is a generated authoring draft. Human approval and operational assessment results have not been supplied.

Question

Are all organization-owned API endpoints configured with request rate limiting controls to prevent service abuse and denial-of-service conditions throughout the review period?

Plain-language explanation

Model-reviewed question draft. Completed explanations and a canonical solution are pending. The proposed positive criterion is: Documented configuration showing enforced request limits per client identifier

Assessment criterion and evidence

Actor: Organization operators. Scope: All externally exposed API endpoints. Evidence period: Review period. Required evidence: Rate limit policy documentation; API gateway configuration records; Monitoring logs showing enforcement. Negative criterion: No rate limiting configuration found or ineffective implementation. Missing evidence: Pending verification due to unavailable configuration records

View the JSON record (opens in a new tab).

Assessment result: unset.