CODEWITHSUNDEEP
amazon-web-servicesaws-api-gateway
men6288
men6288

Reputation: 69

Authorization for API gateway external requests

Currently I have set up an API gateway that external systems will use. What are some good ways which you can handle authorization to the endpoints?

I know API gateway provides keys out of the box but that really doesn't help with the authorization.

Thanks!

Upvotes: 2

Views: 487

Answers (1)

Allan Chua
Allan Chua

Reputation: 10175

I would recommend considering:

  • Cognito Authorizer Lambdas (Link)
  • JWT Authorizer Lambdas (Link)
  • CORS introduction in API gateway level (Link)

Other forms of protection that might be helpful are:

  • Level 7 Protection - AWS WAF (Link)
  • Layer 3 & 4 Protection - AWS Advance Shield (Link)
  • Rate Limiting Feature of API Gateway (Link)

Upvotes: 1

Related Questions