API Gateway Without SSL Certificate

Query id: f27791a5-e2ae-4905-8910-6f995c576d09
Query name: API Gateway Without SSL Certificate
Platform: Pulumi
Severity: Medium
Category: Insecure Configurations
URL: Github

Description¶

SSL Client Certificate should be defined
Documentation

Code samples¶

Code samples with security vulnerabilities¶

Positive test num. 1 - yaml file

name: aws-eks
runtime: yaml
description: An EKS cluster
resources:
  example:
    type: aws:apigatewayv2:Stage
    properties:
      apiId: ${aws_apigatewayv2_api.example.id}

Code samples without security vulnerabilities¶

Negative test num. 1 - yaml file

name: aws-eks
runtime: yaml
description: An EKS cluster
resources:
  example:
    type: aws:apigatewayv2:Stage
    properties:
      apiId: ${aws_apigatewayv2_api.example.id}
      clientCertificateId: 12131323a