Amazon_ApiGateway_2

Ensure that an API Key is required on a Method Request

Description

API keys are string tokens that you provide to client application developers to grant access to your APIs. You can use API keys together with usage plans or Lambda authorizers to control access to your APIs. API Gateway can generate API keys on your behalf, or you can import them from a CSV file.

Remediation

1. Sign in to the AWS Management Console and open the API Gateway console at https://console.aws.amazon.com/apigateway/
2. In the API Gateway main navigation pane, choose Resources
3. Under Resources, create a new method or choose an existing one
4. Choose Method Request
5. Under the Authorization Settings section, choose true for API Key Required
6. Select the checkmark icon to save the settings
7. Deploy or redeploy the API for the requirement to take effect
References : https://docs.aws.amazon.com/apigateway/latest/developerguide/api-gateway-setup-api-key-with-console.html
https://docs.aws.amazon.com/apigateway/latest/developerguide/how-to-create-api.html
https://docs.aws.amazon.com/apigateway/latest/developerguide/how-to-deploy-api.html

Service

API Gateway

Severity

Medium

Compliance

Mapping

We are now live on AWS Marketplace.
The integrated view of your cloud infrastructure is now easier than ever!