ASPM Is Good, But It's Not a Cure-All for App Security
What application security posture management does, it does well. But you'll still need to fill in some holes, especially concerning API security.
https://www.darkreading.com/dr-tech/aspm-is-good-but-not-complete