Role-Based Access Control (RBAC):?

Short answer: The API Gateway can enforce RBAC by checking the roles embedded within the JWT and ensuring the user has the necessary permissions to access specific services. Example: Only users with an admin role can access /admin/* endpoints.

Real-world example (ShopNest)

ShopNest splits Catalog, Cart, Order, and Payment into services so teams can deploy catalog changes without redeploying payments.

Say this in the interview

1. Define — one clear sentence (the short answer above).
2. Example — relate it to a project like ShopNest or your real work.
3. Trade-off — when you would not use it.