Yes. SQL is a form of API, and it carries all the same challenges. -> Permission control, making sure that the user of API can not see data they are not suppos

Yes. SQL is a form of API, and it carries all the same challenges. -> Permission control, making sure that the user of API can not see data they are not supposed to. -> Auditability. Verify that the API is being used correctly. -> Performance. Do not overload the endpoint. (Read from a read replica? And maybe you are not running hour-long analytics queries on the database) -> Consistency. Are you using transactions to read your data? Could you be causing contention? -> API versioning. How do you upgrade the underlying tables without breaking the users.