Zero trust

Hi,

Just a quick question, so imagine you have a web server which is hosted on premise. You have WAF maybe IPS in front of it. And everything is cool. What about a server which is on premises and needs to make api calls to another server on premise. What security measures should be in place in between them to protect and detect that let's say first server is compromised and is making some weird api calls to another server? …

api cybersecurity everything ips on premise on premises premise question security security measures server trust waf web web server zero trust