How can I protect an AWS API Gateway endpoint that will be called by a Java application?

Question

Here is what I've got:

• A Java application that lives outside of AWS.
• An AWS API Gateway endpoint that triggers a Node.js Lambda function.

Here is my question:

How can I protect the endpoint so that only my Java application can be authorized to call the AWS API Gateway endpoint?

Answer 1

There are a number of ways to protect the API from unauthorized access, e.g. AWS Cognito, IAM roles, custom authorizers, resource policies. But they may appear an overkill for a simple use case (when just one application is authorized to access).

Consider API Keys granting access to your API endpoint - a simple way to control access to your API. Here is how to set it up.

Answer 2

You can protect your API from unauthorized access by Turning on the API authentication in your API Gateway & Granting the user access for your API to you IAM users.

AWS API GATEWAY RESOURCE EXPLAINING THE SAME