A team wants a managed HTTPS frontend that routes requests to backend services and applies API policies. Which OCI service should it evaluate?

1. A block-volume backup policy.
2. API Gateway.
3. A service gateway as an HTTP route authorizer.
4. A compartment quota as an API reverse proxy.