Think of a REST API like a waiter in a restaurant. You (an app) tell the waiter what you want (your request), and the waiter goes to the kitchen (the server) to get it for you. REST is just a set of ...
Gartner's ransomware playbook lists three credential reset steps — all human, all Active Directory. Machine identities, which outnumber human ones 82 to 1, aren't mentioned.