Loading controls...
Benchmark: API Gateway
Description
This benchmark provides a set of controls that detect Terraform AWS API Gateway resources deviating from security best practices.
Usage
Browse dashboards and select API Gateway:
steampipe dashboard
Or run the benchmarks in your terminal:
steampipe check terraform_aws_compliance.benchmark.apigateway
Snapshot and share results via Steampipe Cloud:
steampipe loginsteampipe check --share terraform_aws_compliance.benchmark.apigateway
Controls
- API Gateway stage should uses SSL certificate
- API Gateway REST API stages should have AWS X-Ray tracing enabled
- API Gateway REST API cache data should be encrypted at rest
- API Gateway REST and WebSocket API logging should be enabled