MEDIUM
Source
Trivy
ID
AVD-AWS-0002

API Gateway must have cache enabled

Method cache encryption ensures that any sensitive data in the cache is not vulnerable to compromise in the event of interception

Impact

Data stored in the cache that is unencrypted may be vulnerable to compromise

Follow the appropriate remediation steps below to resolve the issue.

Enable cache encryption

 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12
13
14
15
16
17
18
19
resource "aws_api_gateway_rest_api" "example" {
  
}

resource "aws_api_gateway_stage" "example" {
  
}

resource "aws_api_gateway_method_settings" "good_example" {
  rest_api_id = aws_api_gateway_rest_api.example.id
  stage_name  = aws_api_gateway_stage.example.stage_name
  method_path = "path1/GET"
  
  settings {
    metrics_enabled = true
    logging_level   = "INFO"
    cache_data_encrypted = true
  }
}