Content security at service layer

An apparatus comprising a processor, a memory, and communication circuitry, the apparatus being connected to a network via its communication circuitry, the apparatus further comprising computer-executable instructions stored in the memory of the apparatus which, when executed by the processor of the apparatus, cause the apparatus to perform operations comprising:

• receiving, from a device, a first request for one or more credentials that encrypt or integrity protect application content when stored at rest on a hosting common services entity, the request based on one or more security parameters associated with the application content;
• and
• sending, based on the request and to the device, the one or more credentials to cause:
• encrypting or integrity protecting the application content, and
• sending, by the device to the hosting common services entity, a second request to create a resource that stores the encrypted or integrity protected content.