For additional information on how to secure Amazon API Gateway, build an API platform on AWS, or implement governance for serverless applications, see the following resources:

• Security in Amazon API Gateway
• Building an API platform on AWS
• Security Overview of Amazon API Gateway
• Serverless Applications Lens - AWS Well-Architected Framework
• Implementing governance in depth for serverless applications
• Implementing security controls on AWS
• Aligning to the NIST Cybersecurity Framework in the AWS Cloud