The client is an organization looking to enable secure and controlled access to specific data within their Azure MS SQL database for third-party providers. Their goal was to develop custom API calls that catered to the specific needs of these providers while ensuring data security and compliance with regulations such as GDPR.
The client faced the challenge of securely managing both incoming and outgoing API calls, catering to the unique data requirements of different third-party providers. They needed to ensure strict access control, including individual logins with customizable data permissions and IP-based access restrictions. Additionally, they required a robust logging mechanism to track all API usage, ensuring compliance with cybersecurity best practices and GDPR regulations. Estimating the monthly Azure costs based on anticipated traffic and resource requirements was also essential.