Configure security controls, including custom rules, rate limits, IP access lists, and cache purges, and view traffic analytics for your SCAPI zone directly in Business Manager or through the CDN Zones API. Previously, SCAPI zones were entirely Salesforce-managed, so every WAF rule or IP block required a support case. Now you can respond to abusive traffic, such as credential stuffing against your login endpoints, in real time, while platform guardrails reject any configuration that would break SCAPI routing or your ecommerce traffic.
Where: This change applies to B2C Commerce.
How: In Business Manager, select Administration | Sites | Embedded CDN Settings. In your SCAPI zone’s dropdown, select Configure Zone. Because a SCAPI zone is shared across your Development, Staging, and Production environments, scope each rule by org ID to avoid affecting other environments.