If you are using a Web3 gateway for internal application calls, you may want to restrict gateway access to specific backend services.
You can achieve this goal by creating general Access policies to block normal traffic and then creating service tokens to allow access by your backend service.