Skip to content

Latest commit

 

History

History
25 lines (21 loc) · 1.29 KB

api-stage-level-cache-encryption.md

File metadata and controls

25 lines (21 loc) · 1.29 KB

CloudSploit

AWS / API Gateway / API Stage-Level Cache Encryption

Quick Info

Plugin Title API Stage-Level Cache Encryption
Cloud AWS
Category API Gateway
Description Ensure that your Amazon API Gateway REST APIs are configured to encrypt API cached responses.
More Info It is strongly recommended to enforce encryption for API cached responses in order to protect your data from unauthorized access.
AWS Link https://docs.aws.amazon.com/apigateway/latest/developerguide/data-protection-encryption.html
Recommended Action Modify API Gateway API stages to enable encryption on cache data

Detailed Remediation Steps

To configure API caching for individual methods using the console:

  1. Sign in to the API Gateway console at https://console.aws.amazon.com/apigateway.
  2. Go to the API Gateway console.
  3. Choose the API.
  4. Choose Stages.
  5. In the Stages list for the API, expand the stage and choose a method in the API.
  6. Choose Override for this method in Settings.
  7. In Cache Settings, choose Encrypt cache data. (This section is shown only if stage-level caching is enabled.)