Each API operation should have a security definition referencing the central security scheme express for an OpenAPI
OpenAPI Operation Security Definitions Error
Message: Operations MUST Have a Security Definition
Policies
Operation Security
Security definitions on operations make access requirements explicit. Every operation should clearly state what authentication and authorization is required to call it.