By using AWS re:Post, you agree to the AWS re:Post Terms of Use
AWS re:Postre:Post

Network Firewall and API Gateway : how to ?

0

Is it useful to use a Network Firewall in an API Gateway based solution, a VPC Link to a private subnet containing a private ALB with ECS services ?

If yes, how to configure the solution to inspect the flows through the firewall?

Topics
Networking & Content DeliveryServerlessFront-End Web & MobileSecurity, Identity, & ComplianceAWS Well-Architected Framework
Tags
Amazon VPCAmazon API GatewayAWS Network FirewallSecurityApplication Load Balancer
Language
English
profile picture
ST Team
asked 2 years ago261 views
1 Answer
0

You should definitely use AWS WAF with API Gateway to protect you against well known vulnerabilities such as OWASP - https://docs.aws.amazon.com/apigateway/latest/developerguide/apigateway-control-access-aws-waf.html

As regards using a Network Firewall for IDS/IPS capabilities, some patterns are discussed here - https://docs.aws.amazon.com/whitepapers/latest/building-scalable-secure-multi-vpc-network-infrastructure/centralized-inbound-inspection.html

You should be able to adapt the API Gateway architecture to fit into these patterns.

profile pictureAWS
EXPERT
Indranil Banerjee AWS
answered 2 years ago

You are not logged in. Log in to post an answer.

A good answer clearly answers the question and provides constructive feedback and encourages professional growth in the question asker.

Guidelines for Answering Questions

Relevant content