Storms786
Storms786

Reputation: 456

Running spring boot application in AWS and only allowing access via the AWS API Gateway

I want to run a spring boot application in aws (using ec2 or elastic beanstalk); this application has REST endpoints and I want to secure it such that only the AWS API Gateway has the permissions to invoke the endpoints (i.e. no public access and no access from other services)

How can I do this?

Upvotes: 0

Views: 605

Answers (1)

Mark B
Mark B

Reputation: 200446

You have to configure API Gateway to use a Client-Side SSL Certificate. Then you have to configure your back-end to reject any requests that don't include that certificate.

Upvotes: 1

Related Questions