Protect applications and services by using a dedicated host instance to broker requests between clients and the application or service. The broker validates and sanitizes the requests, and can provide an additional layer of security and limit the system's attack surface.
https://learn.microsoft.com/en-us/azure/architecture/patterns/gatekeeper
