Authorization for API gateway external requests

user_12448667 0
Viewed 109

Currently I have set up an API gateway that external systems will use. What are some good ways which you can handle authorization to the endpoints?

I know API gateway provides keys out of the box but that really doesn't help with the authorization.

Thanks!

amazon-api-gateway amazon-web-services
1 Answers

I would recommend considering:

  • Cognito Authorizer Lambdas (Link)
  • JWT Authorizer Lambdas (Link)
  • CORS introduction in API gateway level (Link)

Other forms of protection that might be helpful are:

  • Level 7 Protection - AWS WAF (Link)
  • Layer 3 & 4 Protection - AWS Advance Shield (Link)
  • Rate Limiting Feature of API Gateway (Link)
user_9834760
Related