Check whether the policy has been bound to an API.
Check whether the API bound with the policy uses app or IAM authentication.
Check whether the API bound with the policy uses app authentication.