Just a note, I do not need something as heavy or advanced as an API Gateway server since the only that happens here is the user API key is logged in an SQL server with some additional information that will be sent with the message. The API key is just to validate that the user is real.