This section explores some examples of controls you can use for Amazon API Gateway REST APIs and how to implement them using tools listed previously. This is by no means an exhaustive list, rather a few scenarios to help you understand typical approaches while implementing your governance controls.

Implementations usually are driven by the individual tool capabilities. For example, AWS CloudFormation Guard has set a number of configuration properties specific to the API Gateway REST API or stage which would limit your ability to write AWS CloudFormation Guard or AWS Config custom policy rules. However, you may implement an AWS Config custom AWS Lambda rule or create a rule in Amazon EventBridge which uses a Lambda function that inspects the updated resource state via the AWS SDK and takes actions necessary.

• Enforcing observability for governance
• Enforcing security for governance
• Enforcing management control