Ensure authorization is enabled for AWS API Gateway Method

HIGH

Description

AWS API Gateway can be configured for IAM authentication and authorization. Specific policies can be used for specific actions and resources to secure an API. For more information, see the AWS documentation.
References:
https://docs.aws.amazon.com/apigateway/latest/developerguide/security_iam_service-with-iam.html

Remediation

In AWS Console -

  1. Sign in to AWS Console and open the API Gateway Console.
  2. Choose the API Gateway that you want to update.
  3. Authorizers section, select Create New Authorizer.
  4. Select either Lambda or Cognito and enter the appropriate settings.
  5. Select Create.

In Terraform -

  1. In the aws_api_gateway_method resource, set authorization as needed.

There are additional methods for securing access to an API Gateway. For more information, see the AWS or Terraform documentation.
References:
https://docs.aws.amazon.com/apigateway/latest/developerguide/apigateway-control-access-to-api.html
https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/api_gateway_method

Policy Details

Rule Reference ID: AC_AWS_0439
CSP: AWS
Remediation Available: Yes
Resource Category: Virtual Network
Resource Type: API Gateway

Frameworks