[{"data":1,"prerenderedAt":99},["ShallowReactive",2],{"content-guides-api-gateway-governance-index":3},{"markdown":4,"frontMatterAttributes":5,"bodyRaw":8,"contributorPaths":9,"menuType":11,"contentName":12,"slug":13,"readingTime":14,"menu":15,"nextDocItem":93,"previousDocItem":81},"\u003Cp>Following is a list of the examples in this guide:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>\u003Ca href=\".\u002Fobservability\">Enforcing observability for governance\u003C\u002Fa>\u003Cul>\n\u003Cli>Require AWS X-Ray tracing is enabled\u003C\u002Fli>\n\u003Cli>Require access logging is enabled\u003C\u002Fli>\n\u003Cli>Require execution logging is enabled\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>\u003Ca href=\".\u002Faccess_control\">Enforcing security for governance\u003C\u002Fa>\u003Cul>\n\u003Cli>Require that AWS WAF is enabled\u003C\u002Fli>\n\u003Cli>Require a client certificate for backend integrations\u003C\u002Fli>\n\u003Cli>Require a particular TLS version for a custom domain\u003C\u002Fli>\n\u003Cli>Require mTLS is enabled for all custom domains\u003C\u002Fli>\n\u003Cli>Require a particular type of authorizer\u003C\u002Fli>\n\u003Cli>Require that a usage plan is associated with a resource\u003C\u002Fli>\n\u003Cli>Require API key to access a resource\u003C\u002Fli>\n\u003Cli>Require request validations, including specific headers\u003C\u002Fli>\n\u003Cli>Require only specific VPCs in the private API endpoint resource policy\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>\u003Ca href=\".\u002Fmanagement\">Enforcing management control\u003C\u002Fa>\u003Cul>\n\u003Cli>Freeze API modifications based on a tag\u003C\u002Fli>\n\u003Cli>Prevent custom domains in child accounts (enforce central API service account)\u003C\u002Fli>\n\u003Cli>Prevent public APIs in accounts other than the central API\u002Fservice account\u003C\u002Fli>\n\u003Cli>Require all resources to have tags\u003C\u002Fli>\n\u003Cli>Require error responses to have custom messages\u003C\u002Fli>\n\u003Cli>Require API has documentation\u003C\u002Fli>\n\u003Cli>Require response payload compression is enabled\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003C\u002Ful>\n",{"title":6,"order":7},"Index of examples",11,"Following is a list of the examples in this guide:\n\n- [Enforcing observability for governance](.\u002Fobservability)\n  - Require AWS X-Ray tracing is enabled\n  - Require access logging is enabled\n  - Require execution logging is enabled\n- [Enforcing security for governance](.\u002Faccess_control)\n  - Require that AWS WAF is enabled\n  - Require a client certificate for backend integrations\n  - Require a particular TLS version for a custom domain\n  - Require mTLS is enabled for all custom domains\n  - Require a particular type of authorizer\n  - Require that a usage plan is associated with a resource\n  - Require API key to access a resource\n  - Require request validations, including specific headers\n  - Require only specific VPCs in the private API endpoint resource policy\n- [Enforcing management control](.\u002Fmanagement)\n  - Freeze API modifications based on a tag\n  - Prevent custom domains in child accounts (enforce central API service account)\n  - Prevent public APIs in accounts other than the central API\u002Fservice account\n  - Require all resources to have tags\n  - Require error responses to have custom messages\n  - Require API has documentation\n  - Require response payload compression is enabled",[10],"content\u002Fcontributors\u002Fgiedrius-praspaliauskas.json","LIST","Amazon API Gateway governance in depth","\u002Fcontent\u002Fguides\u002Fapi-gateway-governance\u002Findex","1 min",[16,58,87],{"title":17,"content":18},"Amazon API Gateway governance",[19,31,38,45,52],{"title":20,"order":21,"authors":22,"callout":24,"time":14,"path":28,"id":29,"link":30},"Introduction",1,[23],"Giedrius Praspaliauskas",{"title":25,"description":26,"link":27},"Building an API platform on AWS","This guide summarizes the API lifecycle and provides an AWS point of view on building an API platform using Amazon API Gateway. It provides prescriptive guidance on 3rd party and AWS services to cover the end-to-end needs of the API lifecycle.","https:\u002F\u002Fserverlessland.com\u002Fcontent\u002Fservice\u002Fapi-gateway\u002Fpaved-path\u002Fbuilding-an-api-platform-on-aws\u002Fintroduction","introduction","introduction.md","\u002Fcontent\u002Fguides\u002Fapi-gateway-governance\u002Fintroduction",{"title":32,"order":33,"time":34,"path":35,"id":36,"link":37},"Security controls",2,"2 min","controls","controls.md","\u002Fcontent\u002Fguides\u002Fapi-gateway-governance\u002Fcontrols",{"title":39,"order":40,"time":41,"path":42,"id":43,"link":44},"Tools",3,"7 min","tools","tools.md","\u002Fcontent\u002Fguides\u002Fapi-gateway-governance\u002Ftools",{"title":46,"order":47,"time":48,"path":49,"id":50,"link":51},"API management access control",4,"4 min","management_access","management_access.md","\u002Fcontent\u002Fguides\u002Fapi-gateway-governance\u002Fmanagement_access",{"title":53,"order":54,"time":14,"path":55,"id":56,"link":57},"API management audit",5,"audit_track","audit_track.md","\u002Fcontent\u002Fguides\u002Fapi-gateway-governance\u002Faudit_track",{"title":59,"content":60},"Use cases and examples",[61,67,74,81],{"title":62,"order":63,"time":14,"path":64,"id":65,"link":66},"Use-cases overview",6,"use_cases","use_cases.md","\u002Fcontent\u002Fguides\u002Fapi-gateway-governance\u002Fuse_cases",{"title":68,"order":69,"time":70,"path":71,"id":72,"link":73},"Enforcing observability for governance",8,"3 min","observability","observability.md","\u002Fcontent\u002Fguides\u002Fapi-gateway-governance\u002Fobservability",{"title":75,"order":76,"time":77,"path":78,"id":79,"link":80},"Enforcing security for governance",9,"5 min","access_control","access_control.md","\u002Fcontent\u002Fguides\u002Fapi-gateway-governance\u002Faccess_control",{"title":82,"order":83,"time":48,"path":84,"id":85,"link":86},"Enforcing management control",10,"management","management.md","\u002Fcontent\u002Fguides\u002Fapi-gateway-governance\u002Fmanagement",{"title":88,"content":89},"Summary",[90,93],{"title":6,"order":7,"time":14,"path":91,"id":92,"link":13},"index","index.md",{"title":94,"order":95,"time":14,"path":96,"id":97,"link":98},"Additional resources",12,"additional_resources","additional_resources.md","\u002Fcontent\u002Fguides\u002Fapi-gateway-governance\u002Fadditional_resources",1792578865339]