APIGateway.4

API Gateway should be associated with a WAF Web ACL

Severity

Cloud Platforms

Resources

Related Standards

Automated

MEDIUM

AWS

Amazon API Gateway

AWS Foundational Best Practice, CDR, SOC2,

This control checks to see if an API Gateway stage is using an AWS WAF Web ACL. This control fails if an AWS WAF Web ACL is not attached to a REST API Gateway stage.