AWS API Gateway not private

Updated: June 19, 2025

findings cloud based findings api finding

Description

A private API Gateway is configured with an IAM policy that allows public access.

Review and update the IAM policy attached to the API Gateway to ensure it restricts access appropriately.

Previous (Findings - Cloud based findings): AWS ALB should redirect HTTP to HTTPS
Next (Findings - Cloud based findings): AWS Load Balancer missing deletion protection