Network misconfigurations

API Gateway is not using SSL certificates

Risk Level

Informational (4)

Platform(s)

Description

API Gateway {AwsApiGatewayEndpoint} is not using client-side SSL certificates. SSL certificates are used to ensure that backend HTTP requests are made from API Gateway
  • Recommended Mitigation

    We recommend to use client-side SSL certificates for authentication of backend HTTP requests