Ensure that the endpoint type is set to private for API Gateway Rest API

MEDIUM

Description

Amazon API Gateway Rest API can be configured for private access by using a VPC. This may help prevent unauthorized access or data loss through public networks.

Remediation

In AWS Console -

  1. Sign in to the API Gateway console.
  2. Select Create API.
  3. Under REST API, select Build.
  4. Enter a name for API Name.
  5. For Endpoint Type, select Private.
  6. Click on Create API.

In Terraform -

  1. In the aws_api_gateway_rest_api resource, add 'PRIVATE' to the list of 'endpoint_configuration.types'.
  2. Configure vpc_endpoint_ids as needed.

References:
https://docs.aws.amazon.com/apigateway/latest/developerguide/apigateway-vpc-endpoint-policies.html
https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/api_gateway_rest_api#endpoint_configuration

Policy Details

Rule Reference ID: AC_AWS_0011
CSP: AWS
Remediation Available: Yes
Resource Category: Virtual Network
Resource Type: API Gateway

Frameworks