When every request comes from a cloud IP at high throughput, generic bot detection is useless — it flags everything. Vectoral's api_platform profile is tuned for exactly this: it looks past the datacenter origin to token velocity, sybil clustering, and per-key behavior, so you catch the abusive account without throttling your legitimate machine traffic. Score inline in ~30 ms; enforce per key.
Lead with