ASM in front of iControl REST

Hi,

 

I'm trying to limit what actions can be taking using the icontrol rest api. Using ASM 12.1.2, I hope to limit what URLs can be accessed and what methods can be used, thus limiting the scope of possible operations.

 

I've heard reference to using ASM in front of the self-IP somehow, but I haven't been able to find any specific documentation. Does anyone have an example of deploying ASM in front of icontrol rest?

 

Thanks!

 

Mike