X-Api-Key header of your requests.
If you are using the Custom plan, you can request browser-based access via Cloudflare Zero Trust. This requires the Prism API traffic to terminate at Cloudflare. Frontend CDN choice for the application itself is unaffected.