It is also worth quickly mentioning the response policies at this stage. These are entered by selecting the Response tab in the API manager portal as shown in the following screenshot:
Response policies
While the use case for MRA does not require any response policies, there may be situations where redaction is required to prevent external users from seeing sensitive data. This policy can be used for example, to ensure that when a backend service, which exposes price sensitive data, is invoked externally via an API gateway, that the pricing data is redacted and not sent back to the consumer. A logging policy could be used ...
