Service managing API traffic including authentication, rate limiting, and routing. Centralizes security policy enforcement for backend services.