How to develop secure and scalable serverless APIs