Reputation: 456
I want to run a spring boot application in aws (using ec2 or elastic beanstalk); this application has REST endpoints and I want to secure it such that only the AWS API Gateway has the permissions to invoke the endpoints (i.e. no public access and no access from other services)
How can I do this?
Upvotes: 0
Views: 605
Reputation: 200446
You have to configure API Gateway to use a Client-Side SSL Certificate. Then you have to configure your back-end to reject any requests that don't include that certificate.
Upvotes: 1