An API Gateway instance is compliant if IPv6 access control is enabled and a valid access control list is configured.
Scenarios
Checks whether an API Gateway instance has IPv6 access control enabled with a valid access control list, preventing unauthorized IP access and improving API security.
Risk level
Default risk level: medium.
You can change the risk level based on your requirements.
Detection logic
-
An API Gateway instance is compliant if IPv6 access control is enabled and a valid access control list is configured.
Rule details
|
Parameter |
Description |
|
Rule name |
Enable IPv6 access control and set a valid access control list for an API Gateway instance |
|
Rule identifier |
|
|
Tag |
ApiGateway |
|
Automatic remediation |
Not supported |
|
Rule trigger |
Periodic |
|
Trigger frequency |
24 hours |
|
Supported resource types |
ACS::ApiGateway::Instance |
|
Input parameters |
None |
Remediation
To remediate a non-compliant resource, see Use an instance-level access control policy group to control access.