You can configure an IP filtering policy for a managed API , managed API group, or custom API.
The IP filtering policy designates the range of computer IP addresses that are allowed or that are denied permission to invoke the API. If an IP filtering policy is not defined for an API, or if API Center doesn't find any matches with the API-specific policy, API Center applies the domain IP filtering policy to the API.