turbot/aws_compliance
Loading controls...

Control: 2 API Gateway REST API stages should be configured to use SSL certificates for backend authentication

Description

This control checks whether Amazon API Gateway REST API stages have SSL certificates configured. Backend systems use these certificates to authenticate that incoming requests are from API Gateway.

API Gateway REST API stages should be configured with SSL certificates to allow backend systems to authenticate that requests originate from API Gateway.

Remediation

For detailed instructions on how to generate and configure API Gateway REST API SSL certificates, see Generate and configure an SSL certificate for backend authentication.

Usage

Run the control in your terminal:

powerpipe control run aws_compliance.control.foundational_security_apigateway_2

Snapshot and share results via Turbot Pipes:

powerpipe login
powerpipe control run aws_compliance.control.foundational_security_apigateway_2 --share

SQL

This control uses a named query:

apigateway_rest_api_stage_use_ssl_certificate

Tags