If I create a GraphQL API, I can see me accidentally falling foul of this. I'd require users to use their own API keys rather than using mine, so it would look like users would be potentially going through the same AWS IP. Hopefully using GraphQL through an AWS would mitigate this, but I can't be sure, I don't want to do the work only to get banned.
Should I lock down the GraphQL instance for my own purposes, and make others clone the code run their own versions? Or would I be okay?
Log in to comment