Airlock Gateway (WAF) configuration for bank API calls

The "Bank API Calls" (calls from the TPPs to the bank's PSD2 APIs) require the following Gateway (WAF) configuration: