Returning to our fictional company MRA, as described in Chapter 2, Use Case, while being multinational don't trade in every country, and therefore want to limit their API use to countries where they have business interests. This is as a result of legislation set by in countries in which it operates and organizations like the United Nations. For example, in the past, countries have been subject to trade embargoes. Countries may include:
- North Korea
- Yemen
- Syria
To meet this requirement MRA have decided that it would be beneficial to have a custom API policy that can be used on all of its public-facing APIS. The API needs to be able to accept named countries during the configuration of the policy and then at ...
