Skip to content
By using AWS re:Post, you agree to the AWS re:Post Terms of Use
AWS re:Postre:Post
About re:Post

protect http API GW when CF has S3 as origin

0

Hi team,

Is it possible to prevent users to hit directly my HTTP API GW if my HTTP GW doesn't support WAF AND my CF distribution doesn't have a custom origin (that can support WAF), my CF origin is an S3 bucket.

so I don't have any way to prevent users hit directly HTTP API GW.

Topics
MicroservicesServerlessFront-End Web & MobileComputeNetworking & Content DeliverySecurity, Identity, & Compliance
Tags
MicroservicesAmazon API GatewayAmazon CloudFrontAWS WAFWebsite Provisioning
Language
English

asked 4 years ago418 views

1 Answer
0

You can use Custom Headers with CloudFront and API Gateway to prevent hit the API directly.

https://wellarchitectedlabs.com/security/300_labs/300_multilayered_api_security_with_cognito_and_waf/3_prevent_requests_from_accessing_api_directly/

AWS

answered 4 years ago

You are not logged in. Log in to post an answer.

A good answer clearly answers the question and provides constructive feedback and encourages professional growth in the question asker.

Relevant content