API Gateway Policies allow you to configure IP Blacklists and Whitelists. An IP Blacklist denies service calls from defined IP addresses, while an IP Whitelist limits calls to only a defined set of allowed IP addresses. Both require configuration to set the lists of allowed or denied IP addresses.