This is when you put a gateway-type layer on top of a datastore that enforces your own company-specific authn/authz. In this case, the datastore uses a REST AP

This is when you put a gateway-type layer on top of a datastore that enforces your own company-specific authn/authz. In this case, the datastore uses a REST API, so that should be fairly easy to implement. You could even do it in Nginx or Envoy.