All checks
Medium
API Gateway should be associated with a WAF Web ACL
Verifies that API Gateway stages are protected by an AWS WAF web ACL.
- service
- APIGateway
- severity
- Medium
- scope
- evaluated in every region
How to fix it
To associate an AWS WAF Regional web ACL with an existing API Gateway API stage, see Using AWS WAF to protect your APIs in the API Gateway Developer Guide.
- Navigate to the API Gateway console.
- Select the API and stage you want to associate with a WAF Web ACL.
- Use the AWS WAF console to create or select an existing Web ACL and associate it with the API stage.
See which of your accounts this check is failing on.
Book a demo