APIs have become a prominent attack surface over the past year.