[{"data":1,"prerenderedAt":99},["ShallowReactive",2],{"content-guides-api-gateway-governance-use_cases":3},{"markdown":4,"frontMatterAttributes":5,"bodyRaw":8,"contributorPaths":9,"menuType":11,"contentName":12,"slug":13,"readingTime":14,"menu":15,"nextDocItem":64,"previousDocItem":52},"\u003Cp>This section explores some examples of controls you can use for Amazon API Gateway REST APIs and how to implement them using tools listed previously. This is by no means an exhaustive list, rather a few scenarios to help you understand typical approaches while implementing your governance controls.\u003C\u002Fp>\n\u003Cp>Implementations usually are driven by the individual tool capabilities. For example, AWS CloudFormation Guard has set a number of configuration properties specific to the API Gateway \u003Ca href=\"https:\u002F\u002Fgithub.com\u002Fawslabs\u002Faws-config-resource-schema\u002Fblob\u002Fmaster\u002Fconfig\u002Fproperties\u002Fresource-types\u002FAWS%3A%3AApiGateway%3A%3ARestApi.properties.json\">REST API\u003C\u002Fa> or \u003Ca href=\"https:\u002F\u002Fgithub.com\u002Fawslabs\u002Faws-config-resource-schema\u002Fblob\u002Fmaster\u002Fconfig\u002Fproperties\u002Fresource-types\u002FAWS%3A%3AApiGateway%3A%3AStage.properties.json\">stage\u003C\u002Fa> which would limit your ability to write AWS CloudFormation Guard or AWS Config custom policy rules. However, you may implement an AWS Config custom AWS Lambda rule or create a rule in Amazon EventBridge which uses a Lambda function that inspects the updated resource state via the AWS SDK and takes actions necessary.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>\u003Ca href=\".\u002Fobservability\">Enforcing observability for governance\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>\u003Ca href=\".\u002Faccess_control\">Enforcing security for governance\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>\u003Ca href=\".\u002Fmanagement\">Enforcing management control\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n",{"title":6,"order":7},"Use-cases overview",6,"This section explores some examples of controls you can use for Amazon API Gateway REST APIs and how to implement them using tools listed previously. This is by no means an exhaustive list, rather a few scenarios to help you understand typical approaches while implementing your governance controls.\n\nImplementations usually are driven by the individual tool capabilities. For example, AWS CloudFormation Guard has set a number of configuration properties specific to the API Gateway [REST API](https:\u002F\u002Fgithub.com\u002Fawslabs\u002Faws-config-resource-schema\u002Fblob\u002Fmaster\u002Fconfig\u002Fproperties\u002Fresource-types\u002FAWS%3A%3AApiGateway%3A%3ARestApi.properties.json) or [stage](https:\u002F\u002Fgithub.com\u002Fawslabs\u002Faws-config-resource-schema\u002Fblob\u002Fmaster\u002Fconfig\u002Fproperties\u002Fresource-types\u002FAWS%3A%3AApiGateway%3A%3AStage.properties.json) which would limit your ability to write AWS CloudFormation Guard or AWS Config custom policy rules. However, you may implement an AWS Config custom AWS Lambda rule or create a rule in Amazon EventBridge which uses a Lambda function that inspects the updated resource state via the AWS SDK and takes actions necessary.\n\n* [Enforcing observability for governance](.\u002Fobservability)\n* [Enforcing security for governance](.\u002Faccess_control)\n* [Enforcing management control](.\u002Fmanagement)",[10],"content\u002Fcontributors\u002Fgiedrius-praspaliauskas.json","LIST","Amazon API Gateway governance in depth","\u002Fcontent\u002Fguides\u002Fapi-gateway-governance\u002Fuse_cases","1 min",[16,58,84],{"title":17,"content":18},"Amazon API Gateway governance",[19,31,38,45,52],{"title":20,"order":21,"authors":22,"callout":24,"time":14,"path":28,"id":29,"link":30},"Introduction",1,[23],"Giedrius Praspaliauskas",{"title":25,"description":26,"link":27},"Building an API platform on AWS","This guide summarizes the API lifecycle and provides an AWS point of view on building an API platform using Amazon API Gateway. It provides prescriptive guidance on 3rd party and AWS services to cover the end-to-end needs of the API lifecycle.","https:\u002F\u002Fserverlessland.com\u002Fcontent\u002Fservice\u002Fapi-gateway\u002Fpaved-path\u002Fbuilding-an-api-platform-on-aws\u002Fintroduction","introduction","introduction.md","\u002Fcontent\u002Fguides\u002Fapi-gateway-governance\u002Fintroduction",{"title":32,"order":33,"time":34,"path":35,"id":36,"link":37},"Security controls",2,"2 min","controls","controls.md","\u002Fcontent\u002Fguides\u002Fapi-gateway-governance\u002Fcontrols",{"title":39,"order":40,"time":41,"path":42,"id":43,"link":44},"Tools",3,"7 min","tools","tools.md","\u002Fcontent\u002Fguides\u002Fapi-gateway-governance\u002Ftools",{"title":46,"order":47,"time":48,"path":49,"id":50,"link":51},"API management access control",4,"4 min","management_access","management_access.md","\u002Fcontent\u002Fguides\u002Fapi-gateway-governance\u002Fmanagement_access",{"title":53,"order":54,"time":14,"path":55,"id":56,"link":57},"API management audit",5,"audit_track","audit_track.md","\u002Fcontent\u002Fguides\u002Fapi-gateway-governance\u002Faudit_track",{"title":59,"content":60},"Use cases and examples",[61,64,71,78],{"title":6,"order":7,"time":14,"path":62,"id":63,"link":13},"use_cases","use_cases.md",{"title":65,"order":66,"time":67,"path":68,"id":69,"link":70},"Enforcing observability for governance",8,"3 min","observability","observability.md","\u002Fcontent\u002Fguides\u002Fapi-gateway-governance\u002Fobservability",{"title":72,"order":73,"time":74,"path":75,"id":76,"link":77},"Enforcing security for governance",9,"5 min","access_control","access_control.md","\u002Fcontent\u002Fguides\u002Fapi-gateway-governance\u002Faccess_control",{"title":79,"order":80,"time":48,"path":81,"id":82,"link":83},"Enforcing management control",10,"management","management.md","\u002Fcontent\u002Fguides\u002Fapi-gateway-governance\u002Fmanagement",{"title":85,"content":86},"Summary",[87,93],{"title":88,"order":89,"time":14,"path":90,"id":91,"link":92},"Index of examples",11,"index","index.md","\u002Fcontent\u002Fguides\u002Fapi-gateway-governance\u002Findex",{"title":94,"order":95,"time":14,"path":96,"id":97,"link":98},"Additional resources",12,"additional_resources","additional_resources.md","\u002Fcontent\u002Fguides\u002Fapi-gateway-governance\u002Fadditional_resources",1792665264256]