Restricting API access

We will now deploy a Mock API and configure access to the read resource of that API.