MEDIUM
Source
Trivy
ID
AVD-AWS-0002

API Gateway must have cache enabled

Method cache encryption ensures that any sensitive data in the cache is not vulnerable to compromise in the event of interception

Impact

Follow the appropriate remediation steps below to resolve the issue.

Enable cache encryption

 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12
13
14
15
16
17
18
19
20
resource "aws_api_gateway_rest_api" "example" {

}

resource "aws_api_gateway_stage" "example" {

}

resource "aws_api_gateway_method_settings" "good_example" {
  rest_api_id = aws_api_gateway_rest_api.example.id
  stage_name  = aws_api_gateway_stage.example.stage_name
  method_path = "path1/GET"

  settings {
    metrics_enabled      = true
    logging_level        = "INFO"
    caching_enabled      = true
    cache_data_encrypted = true
  }
}