Throttle unauthenticated (no API Key) requests on API Gateway

user_3176550 0
Viewed 2144

I'd like to provide a free tier for my API and allow new users to test drive it without having to sign up for an API key.

Is there a way that I can set a limit/quota and throttle requests that have no api key on API Gateway?

aws-api-gateway aws-lambda amazon-web-services
1 Answers

Yes, essentially there are two places where you can configure your throttling options:

  1. In usage plans. You link API Key to usage plan and configure method request to require API key. http://docs.aws.amazon.com/apigateway/latest/developerguide/api-gateway-api-usage-plans.html

  2. n stage settings you can configure default throttling method - this will be applicable to any request (no API key required). http://docs.aws.amazon.com/apigateway/latest/developerguide/api-gateway-request-throttling.html

what you are looking is 2.

by the way, very important moment - be aware that API Keys are not a security mechanism - you should not use API for authentication purposes.

user_6354390
Related