Control: 2 API Gateway REST API stages should be configured to use SSL certificates for backend authentication
Description
This control checks whether Amazon API Gateway REST API stages have SSL certificates configured. Backend systems use these certificates to authenticate that incoming requests are from API Gateway.
API Gateway REST API stages should be configured with SSL certificates to allow backend systems to authenticate that requests originate from API Gateway.
Remediation
For detailed instructions on how to generate and configure API Gateway REST API SSL certificates, see Generate and configure an SSL certificate for backend authentication.
Usage
Run the control in your terminal:
powerpipe control run aws_compliance.control.foundational_security_apigateway_2Snapshot and share results via Turbot Pipes:
powerpipe loginpowerpipe control run aws_compliance.control.foundational_security_apigateway_2 --shareSQL
This control uses a named query:
apigateway_rest_api_stage_use_ssl_certificate