An API experiences a high rate of client requests (TPS) vwth small message paytoads.

Use an SLA-based rate limiting policy and assign a client application to a matching SLA tier based on its type

Use a spike control policy that limits the number of requests for each client application type

Use a cross-origin resource sharing (CORS) policy to limit resource sharing between client applications, configured by the client application type

Use a rate limiting policy and a client ID enforcement policy, each configured by the client application type