Questions tagged [amazon-api-gateway]

The tag has no usage guidance.

Filter by
Sorted by
Tagged with
0
votes
0answers
98 views

Why AWS Cognito client secret is not “secret”

We are setting up SaaS server-to-server auth solution using AWS Cognito + API Gateway using oAuth2 Client credentials flow. And one thing is totally bugging me - I can access App client secret in ...
0
votes
1answer
32 views

AWS: Protecting access to specific ports on an EC2 instance

I have an EC2 instance running an application which provides APIs on port 1000 and 2000. The EC2 instance should be allowed all outgoing traffic as well as any incoming traffic to port 1000. ...
-2
votes
2answers
113 views

Securing an AWS ALB

Hi everybody I’m relatively new to AWS web services and I’m struggling to secure an ALB. My web page works in a simple way there’s an api gateway where the methods are defined, then I have a ALB that ...
0
votes
0answers
41 views

How to update certificate if API gateway connecting to RDS via lambda

AWS is emailing me to update the CA certificate of RDS and simultaneously update the client SSL which is making connection to RDS. According to the documentation I understood that I need to download ...
0
votes
0answers
19 views

ThrottlingException from Step Function triggered through API Endpoint

I have made a Step Functions State Machine the target of an API Gateway endpoint. The endpoint is supposed to trigger the State Machine. I made two or three requests to the endpoint. The first one ...
0
votes
1answer
404 views

How to solve python POST response 405 [closed]

How to solve python POST response 405? import requests import json from requests.auth import HTTPBasicAuth myHeaders = { 'accept': 'application/json', 'content-type': 'application/json', 'X-Killbill-...
0
votes
0answers
125 views

Securing scope in AWS Cognito

I'm working on a project using AWS API Gateway, in conjunction with AWS Cognito in order to authenticate and authorize users. I've defined my User Pool and added a resource server to add custom scopes,...
1
vote
1answer
137 views

Different http error code and html body

We are using AWS to host our applications. Yesterday we had an issue and were by accident deleted the "Custom domain names" from the API Gateway. The issue was resolved and the services started ...
0
votes
0answers
48 views

Proxy S3 and API Gateway behind HAProxy

I’m fairly new to HAProxy so please assume there are multiple errors in my config :slight_smile: I’m trying to proxy two parts of my app. gcd.abc.com/ => Amazon S3 and gcd.abc.com/api => API ...
0
votes
1answer
84 views

Why use AWS API Gateway instead of naked Lambda?

This is more of a suggestion that I need. What is the need for API Gateway when we can directly execute Lambda functions from the apps? What are the missing pieces provided by API Gateway which we ...
0
votes
0answers
51 views

Verify requests are coming from AWS API Gateway in Cloudflare

I have an AWS API Gateway setup which sends requests to some servers. The servers are load-balanced with Cloudflare and this all works well. However, at Cloudflare, I want to make sure that requests ...
0
votes
1answer
35 views

API Gateway and VPC access lists

My understanding is that controlling IP address access to AWS api-gateway is via Resource policies. This does not sound ideal as it would involve deploying the API each time new access was required ...
1
vote
0answers
177 views

How to configure Cloudfront for API Gateway with API key enabled?

I configured two API Gateways one with API-key enabled and the other with API-key disabled. For both the API gateways I configured and enabled CloudFront. For the API-gateway which has API-key ...
0
votes
0answers
50 views

AWS API doesn't return CORS headers on Windows 7 IE11

Unsure if this is an AWS issue or it's because of Internet Explorer. When using xhr on IE11 to request data from an API there is some weird CORS behaviour between IE11 versions (specifically between ...
4
votes
1answer
1k views

AWS Lambda, AWS API Gateway, AWS Cloudfront gives 403 error

I run a Django project deployed on AWS lambda using serverless Zappa framework. This can be accessed by a randomly generated link from AWS API Gateway lets say:- randomly-generated-link.aws.amazon....
2
votes
0answers
1k views

Error while invoking private API in AWS

I have created a Private API in AWS API gateway using Internal Application LoadBalancer as HTTP_PROXY integration Request for GET Method. I also attached Resource Policy to this API and created ...
1
vote
1answer
305 views

Access private API from a domain hosted in AWS

I'm trying to make private AWS lambda call made through API gateway and I don't find the right answer on the internet, probably because I'm a beginner in AWS website management. The closest source I ...
3
votes
1answer
915 views

AWS API Gateway Lambda Authorizers + Client certificates

I'm evaluating the use of client certificatates to improve security in an application i'm working on. It all run behind on AWS and pass through an API Gateway with an attached Lambda authorizer. AWS ...
0
votes
0answers
176 views

HAProxy to Amazon API Gateway with custom domain

Hi we have been trying to handle an inbound request from HAProxy and use API Gateway to handle the request. The flow is domain1.com is the end point at HAProxy. HAProxy should then forward to ...
1
vote
1answer
87 views

Offload query load from MySQL to a JSON file with expiration

I have a server installed in a fixed container with limited bandwidth and CPU. On this server, I have a website that makes a lot of requests to its database. The web app's MySQL database is only ...
1
vote
1answer
710 views

AWS Lambda as an Application Load Balancer target?

At AWS’ 2018 re:invent, AWS announced that Lambda functions can now be the target of Application Load Balancers (documentation here). I just want to ensure that I understand AWS previous offerings (e....
5
votes
1answer
4k views

AWS Api Gateway- no integration defined for method

Though I have defined the integration when I try to deploy an api gateway I keep getting "No integration defined for method" error similar to https://stackoverflow.com/questions/46087890/no-...
0
votes
1answer
121 views

AWS API Gateway in China

We are planning to launch an app that will be available globally, including China and we plan to use AWS for this. However, because of the "Great Firewall of China" we may run into problems: The app ...
0
votes
1answer
52 views

Unable to authorize Amazon API Gateway using API Key

As per amazon's documentation (https://docs.aws.amazon.com/apigateway/latest/developerguide/api-gateway-setup-api-key-with-console.html) I am supposed to see a dropdown near API KEY. Although I have ...
1
vote
1answer
144 views

Getting issue with VPC in Lambda function

I have attached VPC and private subnets in Lambda function. That is causing the connection issue with the API Gateway/other AWS services. Can anyone suggest the solution for this? Thank you.
0
votes
0answers
43 views

How to block a request which does not has a header using Amazon Web Services

My application back-end was laid on AWS Lambda and exposing API's using API Gateway. And forntend on CloudFront. I want to block a request which does not has a header using AWS service. Can anyone ...
1
vote
2answers
634 views

Sharing AWS API Gateway resource between Terraform Workspaces?

I've seen Terraform workspaces recommended for managing different stages (staging, production). That seems to work well with most things as you generally create different resources that have the stage/...
1
vote
1answer
2k views

AWS API Gateway with Lambda and KeepAlive (persistent connections)

I'm a bit confused about Keep-Alive with AWS API Gateway. Is this something I need to configure? or maybe be careful with this setting? Because I will use API Gateway to execute Lambda functions, and ...
1
vote
1answer
149 views

Terraform aws identity_source

How can I disable the default identity_source when deploying an API Gateway Lambda authorizer using Terraform? resource "aws_api_gateway_authorizer" "authorizer" { name =...
2
votes
1answer
1k views

Should I use CloudFront in front of API/Web just because I want them on a single domain?

I typically develop my applications with frontend single page application on S3 and backend APIs on a server typically elastic beanstalk (so ELB + EC2). I am confused over what is a good choice to put ...
1
vote
1answer
1k views

Pointing google domain subdomain at an aws api-gateway API

I have a google managed domain, and a lambda based api in aws api gateway. I want to create a sub domain that points to api gateway. I created an ACM Certificate using aws certificate manager. This ...
2
votes
1answer
3k views

Allow other AWS services to invoke Lambda using IAM

Is it possible to grant AWS services (e.g. API gateway, Secrets Manager) permission to invoke a Lambda function using only IAM roles? Normally this is done in the function's policy (resource-based ...
1
vote
2answers
6k views

AWS API gateway as proxy to EC2 based microservices

I have a couple of microservices running on EC2. My intention is to use the AWS API gateway to allow internet access to the EC2 APIs. Incoming Traffic is: internet -> API Gateway -> EC2-server ...
2
votes
0answers
1k views

AWS CloudFront with API Gateway's Base Path Mapping for IPv6 support

We currently have some APIs set up in API Gateway, with a Custom Domain Name defined with a Regional Endpoint and Base Path Mappings that map incoming requests to the appropriate API and deployment ...
0
votes
1answer
869 views

Does basepath mapping create a CloudFront Distribution

Does basepath mapping on an API in API gateway use a 'hidden' cloudfront distribution? I have an API on API Gateway, with base path mappings on a domain. However, this doesn't go through cloudfront--...
0
votes
0answers
1k views

AWS API Gateway: self-signed cert for backend HTTP endpoint integration

I have a simple AWS API gateway endpoint. It accepts an https GET request, this is passed to a back-end https API via an integraiton request, and returns simple JSON. This works great when we hit ...
0
votes
2answers
262 views

About an idea to parry DDoS attacks

Background: I'm building a web application using Amazon API Gateway, Amazon S3, AWS Lambda and so on. Note: If you don't know about AWS, any pieces of advice would be highly appreciated. Searching ...
0
votes
0answers
2k views

API Gateaway missing authentication token, why?

After extensive research and double checking, I still have the problem. Here the situation: I deployed the API with Authorization:NONE and API KEY required: true on stage "testkey" I copy&pasted ...
3
votes
1answer
3k views

Binary body passthrough from API Gateway to Lambda

I think I've closely followed the documentation and tutorials I've found so far, but I still get this to work. I just can't convince AWS not to touch the binary data I'm posting in the body. In my ...
2
votes
1answer
2k views

AWS API Gateway Custom Domain: the domain you provided is already associated with an existing CloudFront distribution

I'm simply attempting to set up a Custom Domain in API Gateway. I have ACM certificate "*.mysite.com.au" that is currently being used to serve a static S3 website out via CloudFront at "beta.mysite....
12
votes
1answer
7k views

How do I setup Route 53 to point to Api Gateway

I'm writing a Cloudformation config file to create a website all in one go. This includes, creating lambda functions, creating the API Gateway, Setting up a S3 Bucket, Creating the Route 53 zone and ...
9
votes
4answers
14k views

How can I use AWS CloudFront and API Gateway side by side for the same domain?

I'm putting that static assets of my website on S3, and setting up CloudFront to distribute them. These essentially holds the content users would need for any GET request on my site, to existing paths ...
1
vote
1answer
157 views

AWS api_gateway custom authorizer: Whats the ID of my custom authorizer?

Im implementing custom authentication using AWS api gateway and Lambda functions. In Chalice documentation, its stated that I need a authorizer_id to link the lambda function with the desired ...
1
vote
0answers
373 views

AWS API Gateway use HTTP instead of HTTPS

I have an IoT device that is posting data to an AWS API Gateway. The device can not currently use HTTPS. Is there any way that I can get the API gateway to accept a standard HTTP POST request?
2
votes
1answer
2k views

HAProxy as reverse proxy for AWS API Gateway

As the title suggest, I have an AWS API Gateway endpoint that I want to put behind HAProxy. This is my current HAProxy configuration defaults mode http log ...
2
votes
1answer
8k views

How do I pass parameters into a nested stack in Amazon CloudFormation?

I'm using CloudFormation to manage an Amazon API Gateway stack, and trying to (re)use a nested stack to add an OPTIONS method to each of my HTTP endpoint methods so I can respond with CORS headers. ...