internal-application-routing
Installation
SKILL.md
Internal Application Routing Through API Gateway
Security Recommendation
Internal applications SHOULD also route their requests through the API gateway rather than connecting directly to guardrails or inference engines. This ensures internal traffic benefits from the same security controls as external traffic.
Rationale
| Concern | Without Gateway | With Gateway |
|---|---|---|
| Authentication | Must be implemented per-service | Centralized enforcement |
| Rate limiting | No protection from internal abuse | Consistent rate limits |
| Request validation | Each service must validate independently | Centralized validation |
| Logging/audit | Fragmented, inconsistent | Unified audit trail |
| Lateral movement | Internal compromise can reach models directly | Gateway acts as chokepoint |