Unrestricted Resource Consumption occurs when APIs allow excessive use of computational, storage, or network resources without adequate limits, enabling attackers to degrade performance or cause denial-of-service.

Remediation

• Implement strict rate limiting, request throttling, and concurrency controls on all API endpoints.
• Define and enforce payload size limits, pagination, and timeouts for resource-intensive operations.
• Monitor and alert on abnormal usage patterns; automatically block or slow abusive clients.
• Use quotas and tiered service plans to cap maximum allowable resource usage per client.