TYPES
Must be either "header" or "query"
The name of the header or query parameter i.e. "X-Api-Key"
The global security type of the API must be one of: httpBasic, httpBearer, apiKey or oauth2