API Gateway Method Does Not Contains An API Key
- Query id: 671211c5-5d2a-4e97-8867-30fc28b02216
- Query name: API Gateway Method Does Not Contains An API Key
- Platform: Terraform
- Severity: Medium
- Category: Access Control
- URL: Github
Description¶
An API Key should be required on a method request.
Documentation
Code samples¶
Code samples with security vulnerabilities¶
Postitive test num. 1 - tf file
resource "aws_api_gateway_method" "positive1" {
rest_api_id = aws_api_gateway_rest_api.MyDemoAPI.id
resource_id = aws_api_gateway_resource.MyDemoResource.id
http_method = "GET"
authorization = "NONE"
}
resource "aws_api_gateway_method" "positive2" {
rest_api_id = aws_api_gateway_rest_api.MyDemoAPI.id
resource_id = aws_api_gateway_resource.MyDemoResource.id
http_method = "GET"
authorization = "NONE"
api_key_required = false
}