A service needs supported REST and GraphQL access over selected database entities. Which capability should be evaluated?

1. A model prompt as the only database authorization layer
2. Data API builder with explicit entity and authorization configuration
3. A public DNS alias as the complete API
4. A backup file as a live GraphQL service