How to enable FIPS endpoint for govcloud AWS gateway (for lambda)?

0

I have a invoke URL as follows: https://ccvddddXXXXX.execute-api.us-gov-west-1.amazonaws.com/beta I want to implement a FIPS endpoint (so that we are TLS 1.2 compliant). I'm missing the fundamental step here. Is the FIPS endpoint automatically? This doesn't work: https://ccvddddXXXXX.execute-api-fips.us-gov-west-1.amazonaws.com/beta I'm not too familiar with the CLI, so if there is something non-UI can you help provide syntax? thanks!

질문됨 3년 전2072회 조회
2개 답변
2

According to the GovCloud API Gateway documentation, "All API Gateway APIs created in GovCloud regions are FIPS-compliant by default."

profile pictureAWS
전문가
kentrad
답변함 3년 전
  • Good find, but confusing. Do you know why documentation here is listing a FIPS specific endpoint for AWS Gateway service? https://aws.amazon.com/compliance/fips/

  • That is the control plane endpoint. You are concerned with the data plane endpoint (execute-api)

1

At this time, FIPS is enabled for Amazon API Gateway running in AWS GovCloud only. It it not enabled for API Gateway running in commercial regions such as us-west-1 (Northern California).

However, you do not need FIPS to be enabled to support TLS 1.2. You can create a custom domain for your API endpoint and associate a security policy with it that enforces TLS 1.2. For instructions, see the API Gateway documentation.

AWS
전문가
답변함 3년 전
  • this is for govcloud, I've updated question to reflect that. Didn't realize that would effect answer. thanks!

로그인하지 않았습니다. 로그인해야 답변을 게시할 수 있습니다.

좋은 답변은 질문에 명확하게 답하고 건설적인 피드백을 제공하며 질문자의 전문적인 성장을 장려합니다.

질문 답변하기에 대한 가이드라인

관련 콘텐츠