SAM HTTP API stages for V1 and V2 should have access logging enabled
API Gateway stages should have access log settings block configured to track all access to a particular stage. This should be applied to both v1 and v2 gateway stages.
Impact
Logging provides vital information about access and usage
Recommended Actions
Follow the appropriate remediation steps below to resolve the issue.
Enable logging for API Gateway stages
1
2
3
4
5
6
7
8
9
10
11
12
13
AWSTemplateFormatVersion: 2010-09-09
Description: Good Example of SAM API
Resources:
ApiGatewayApi:
Type: AWS::Serverless::HttpApi
Properties:
Name: Good SAM API example
StageName: Prod
Tracing: Activey
AccessLogSettings:
DestinationArn: gateway-logging
Format: json