The Cloud Security Alliance released two new research documents to provide guidance on Cloud Incident Response and Consuming and Providing APIs.
https://cloudsecurityalliance.org/artifacts/cloud-incident-response-framework/?utm_source=email
https://cloudsecurityalliance.org/artifacts/security-guidelines-for-providing-and-consuming-apis/?utm_source=email
Cloud Incident Response provides a framework for handling the lifecycle of a security incident in the cloud and discusses what information is shared internally and with clients and third parties.
Security Guidelines for Consuming and Providing APIs provides a risk evaluation process and a security checklist for APIs.