SAP API Management Policy Guide
Following are the categories of policies that SAP API Management provides.
- Traffic management policies:Traffic management policies let you configure cache, control traffic quotas and spikes, set concurrent rate limits, and so on.
- Security policies: Security policies let you control access to your APIs with OAuth, API key validation, and other threat protection features.
- Mediation policies: Mediation policies let you perform message transformation, parsing, and validation, as well as raise faults and alerts.
Here is the link to the SAP API Management policy guide.