In the simplest case, an API Proxy is just a stand-in, a thing a client
calls instead of calling a backend service directly. The proxy can do
things like: enforce security with OAuth token verification, rate limit
with Quota policies, transform paylo...