Network Firewall and API Gateway : how to ?
Is it useful to use a Network Firewall in an API Gateway based solution, a VPC Link to a private subnet containing a private ALB with ECS services ?
If yes, how to configure the solution to inspect the flows through the firewall?
- 新しい順
- 投票が多い順
- コメントが多い順
You should definitely use AWS WAF with API Gateway to protect you against well known vulnerabilities such as OWASP - https://docs.aws.amazon.com/apigateway/latest/developerguide/apigateway-control-access-aws-waf.html
As regards using a Network Firewall for IDS/IPS capabilities, some patterns are discussed here - https://docs.aws.amazon.com/whitepapers/latest/building-scalable-secure-multi-vpc-network-infrastructure/centralized-inbound-inspection.html
You should be able to adapt the API Gateway architecture to fit into these patterns.
関連するコンテンツ
AWS公式更新しました 1年前- AWS公式更新しました 1年前
