API Gateway must have cache enabled
Method cache encryption ensures that any sensitive data in the cache is not vulnerable to compromise in the event of interception
Impact
Recommended Actions
Follow the appropriate remediation steps below to resolve the issue.
Enable cache encryption
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
|
resource "aws_api_gateway_rest_api" "example" {
}
resource "aws_api_gateway_stage" "example" {
}
resource "aws_api_gateway_method_settings" "good_example" {
rest_api_id = aws_api_gateway_rest_api.example.id
stage_name = aws_api_gateway_stage.example.stage_name
method_path = "path1/GET"
settings {
metrics_enabled = true
logging_level = "INFO"
caching_enabled = true
cache_data_encrypted = true
}
}
|