|
Amazon API Gateway Best Practices
Cloud Conformity monitors Amazon API Gateway following the following rules:
Use AWS WAF to protect Amazon API Gateway APIs from common web exploits.
Ensure APIs created with Amazon API Gateway have active tracing support for AWS X-Ray enabled.
Ensure APIs created with Amazon API Gateway have AWS CloudWatch logging enabled.
Ensure detailed CloudWatch metrics are enabled for Amazon API Gateway APIs stages.
Use client-side SSL certificates for HTTP backend authentication within AWS API Gateway.
Ensure APIs created with Amazon API Gateway have Content Encoding feature enabled.
Ensure APIs created with Amazon API Gateway are only accessible via private endpoints.
Ensure that SSL certificates associated with API Gateway REST APIs are rotated periodically.