Findings

AppSync introspection endpoint enabled

Updated: June 19, 2025

findings cloud based findings api finding

Description

The AppSync GraphQL API has introspection enabled.

Remediation

Disable introspection on the AppSync GraphQL API

Need help?

Contact FireTail support

Previous (Findings - Cloud based findings): AppSync GraphQL API resolver count limit not set
Next (Findings - Cloud based findings): AppSync logging is not enabled