A. Use a cross-origin resource sharing (CORS) policy to limit resource sharing between client applications, configured by the client application type

B. Use a spike control policy that limits the number of requests for each client application type

C. Use a rate limiting policy and a client ID enforcement policy, each configured by the client application type

D. Use an SLA-based rate limiting policy and assign a client application to a matching SLA tier based on its type