You may need an API Gateway to enforce policies specific to your organization. Ambassador supports custom policies through external services. The policy logic specific to your organization is implemented in the external service, and Ambassador is configured to send RPC requests to your service.

Currently, Ambassador supports external services for authentication, rate limiting and tracing.