DataPower also supports important security standards like OIDC, OAuth, WS-Security, JWT.  As it is based on configuration-driven policy creation, it provides extensible platform to  provide first grade security to the enterprise applications with minimum development effort. For example, in Figure 5-2 on page 153 the DataPower in the DMZ provides consistent and  advanced security gateway for the downstream applications. Without the secure gateway,  these applications would have to develop enterprise grade security in order to expose or use  external services. The overhead of building and managing of hardened security module can  be avoided by using a secure gateway. As an API Gateway the integration security capabilities are used for exposing internal APIs to  consumers. It acts as a façade for the internal APIs as it has features like: 5.4.2 API Gateway 5.4.3 DataPower and agile integration 154  Accelerating Modernization with Agile Integration GLYPH<SM590000> Deep integration:  DataPower provides configuration led easy path for integrating with  various Systems of Record via out-of-the-box adapters for a selection of technology  protocols, easy transformation and routing rules. However, DataPower it is not a general  purpose integration capability. IBM App Connect is the premier integration solution  covering the broadest range of protocols and mediation capabilities. In the next section,  we explore IBM App Connect in more detail. There are also capabilities such as IBM z/OS  GLYPH<SM590000> API gateway : With the rise in federated middleware and decentralized ownership, there is  a marked increase in applications wanting to expose their APIs to other applications via  their own infrastructure. Building enterprise grade custom API gateway is neither feasible  nor desirable. IBM API Connect is a scalable API platform that allows creation and  management of APIs securely across clouds. Section 5.3, “API Lifecycle: IBM API  Connect” on page 147 discusses in detail the differences between DataPower and IBM  API Connect and the benefits that a broader API management solution brings.  GLYPH<SM590000> Security Gateway : DataPower is obviously an excellent choice for the security aspects of  a gateway, providing controlled, restricted access to downstream systems. Indeed, the  physical appliance is often chosen to provide security gateway functionality as delivers up  to 2X the performance of IBM DataPower Gateway (IDG). It has tamper proof hardware  and software and can have a factory-installed hardware security module (HSM). An HSM  provides secure storage for RSA keys and accelerates RSA operations. Due to these  important security features, physical devices are preferred in the production  environments.  DataPower as a gateway inevitably performs a certain level of the underlying integration. But  from an architectural point of view it would be unwise for it to be attempting to do all  integration patterns. We need to consider what are its sweet spots, and where we should be  delegating to deeper integration capabilities. Lets look at some of the integration capabilities  that are provided by the gateway, and then when the crossover should occur to other  technologies. GLYPH<SM590000> Web services infrastructure needed to support highly secure data routing with daily high  volume and sensitive nature of information. GLYPH<SM590000> Centralized service governance and policy enforcement, as discussed in the above point. GLYPH<SM590000> Application optimization, which leverages dynamic runtime conditions to distribute based  on topology and workload. GLYPH<SM590000> Service level monitoring (SLM) to protect your services and applications from  over-utilization and enforce quota.