An API gateway is defined as an access management that is placed in front of an API (application programming interface) and is the single point of access for defined back-end APIs or even microservices (which can be internal or external).
Sitting in front of the APIs, the API Gateway acts as a "protector" that
a) enforces security and
b) allows scalability and