AWS Config Rule: API Gateway Endpoint Type Check
API_GW_ENDPOINT_TYPE_CHECK
Eduardo Van Cauteren
Last Update 9 months ago
Description: Checks if Amazon API Gateway APIs are of the type specified in the rule parameter endpointConfigurationType. The rule returns NON_COMPLIANT if the REST API does not match the endpoint type configured in the rule parameter.
Trigger type: Configuration changes
AWS Region: All supported AWS regions except Canada West (Calgary) Region
How to Resolve Manually
This AWS Config rule validates whether the Endpoint Configuration Type of any API in Amazon API Gateway is set to a predefined value, specifically PRIVATE, EDGE, or REGIONAL. If the Endpoint Configuration Type does not match the expected value, the rule will be marked as non-compliant.
First you need to configure your desired endpoint type within StackZone's console. To do so, first enable the Edit mode and then go to Provisioning > Baseline Services > Config Rules Regional > Development. Once there, locate the API Gateway Endpoint Type card, toggle it on and choose the endpoint type. Finally, save settings and push the configuration to AWS.
If you find some API flagged as non compliant, you can resolve the finding by heading on over AWS Console and then go to Amazon API Gateway service. Look into the list for the API that does not comply and click on its name. Once in the properties screen, click on Settings and find the Endpoint Configuration section to change the type for the desired one. Check the following picture as reference:
Want to know more about StackZone and how to make your cloud management simple and secure?
Check our how it works section with easy to follow videos or just create your own StackZone Account here
