How to enable FIPS endpoint for govcloud AWS gateway (for lambda)?

Question

I have a invoke URL as follows:  https://ccvddddXXXXX.execute-api.us-gov-west-1.amazonaws.com/beta
I want to implement a FIPS endpoint (so that we are TLS 1.2 compliant). 
I'm missing the fundamental step here. Is the FIPS endpoint automatically?
This doesn't work: https://ccvddddXXXXX.execute-api-fips.us-gov-west-1.amazonaws.com/beta
I'm not too familiar with the CLI, so if there is something non-UI can you help provide syntax? thanks!

kentrad · Answer

According to the [GovCloud API Gateway documentation](https://docs.aws.amazon.com/govcloud-us/latest/UserGuide/govcloud-abp.html), "All API Gateway APIs created in GovCloud regions are FIPS-compliant by default."

MichaelFischer · Answer

At this time, FIPS is enabled for Amazon API Gateway running in AWS GovCloud only. It it not enabled for API Gateway running in commercial regions such as us-west-1 (Northern California).

However, you do not need FIPS to be enabled to support TLS 1.2. You can create a custom domain for your API endpoint and associate a security policy with it that enforces TLS 1.2. For instructions, see the [API Gateway documentation](https://docs.aws.amazon.com/apigateway/latest/developerguide/apigateway-custom-domain-tls-version.html).

How to enable FIPS endpoint for govcloud AWS gateway (for lambda)?

相关内容