Benchmark: API Gateway

Usage

Browse dashboards and select API Gateway:

steampipe dashboard

Or run the benchmarks in your terminal:

steampipe check aws_compliance.benchmark.foundational_security_apigateway

Snapshot and share results via Steampipe Cloud:

steampipe login
steampipe check --share aws_compliance.benchmark.foundational_security_apigateway

Controls

• 1 API Gateway REST and WebSocket API logging should be enabled
• 2 API Gateway REST API stages should be configured to use SSL certificates for backend authentication
• 3 API Gateway REST API stages should have AWS X-Ray tracing enabled
• 4 API Gateway should be associated with an AWS WAF web ACL
• 5 API Gateway REST API cache data should be encrypted at rest
• 8 API Gateway routes should specify an authorization type
• 9 Access logging should be configured for API Gateway V2 Stages

Tags