Regional API endpointsĮdge-optimized APIs are endpoints that are accessed through a CloudFront distribution created and managed by API Gateway. The AWS security team published a whitepaper solution using AWS WAF, How to Mitigate OWASP’s Top 10 Web Application Vulnerabilities. In this post, I show you how to take advantage of the regional API endpoint feature in API Gateway, so that you can create your own Amazon CloudFront distribution and secure your API using AWS WAF.ĪWS WAF is a web application firewall that helps protect your web applications from common web exploits that could affect application availability, compromise security, or consume excessive resources.Īs you make your APIs publicly available, you are exposed to attackers trying to exploit your services in several ways. As APIs are publicly exposed, there are a number of best practices for providing a secure mechanism to consumers using your API.Īmazon API Gateway handles all the tasks involved in accepting and processing up to hundreds of thousands of concurrent API calls, including traffic management, authorization and access control, monitoring, and API version management. When you build web applications or expose any data externally, you probably look for a platform where you can build highly scalable, secure, and robust REST APIs. This post courtesy of Thiago Morais, AWS Solutions Architect

Aws waf api gateway