Airlock Gateway (WAF) configuration for bank API calls

The "bank API calls" (calls from the TPPs to the bank's PSD2 APIs) require the following Gateway (WAF) configuration: