iot api best practices