Generating an alert is good enough..
API Security has visibility into Req / Response. The response will show that the service is returning a failure. Based on this, we can generate an alert
Good to showcase
Ref:
https://docs.google.com/document/d/1RUUWq8Kfn3j2fZrFRi4jEIIcK8no0nZMnExsJqJGmbM/edit?usp=drive_link