Components

The API Access Control component is broken into three separate sub components.

Resource Servers

Each of these defines a single server that hosts the API that is being protected.

Resources

Each of these defines a single API.

Resource Access Policies

These are the authorisation policies for accessing the resource.

The following diagram shows the hierarchy of the sub components.