Protect API Gateway with custom firewall

Question

Hi, I have a public API on API Gateway that I want to protect with my own custom third party firewall (not AWS WAF). Basically any public service I expose should be behind this firewall, in an ingress inspection VPC-fashion. For EKS I can solve it but how can I do it for public (non-VPC) services like  API GW?

Answer

What about having the firewall you use proxy towards the API Gateway?

I don't know what kind of custom firewall you are using, but is it one that can be configured for resources outside the VPC in the first place?  
It is best to use AWS WAF to protect the application rather than using a custom firewall.

Protect API Gateway with custom firewall

Contenido relevante