X-Ray active tracing provides real-time metrics of user requests that flow through yourĪPI Gateway REST API operations and connected services.įor detailed instructions on how to enable X-Ray active tracing for API Gateway REST API Changes in performance could result in a lack of availability of theĪPI. X-Ray active tracing enables a more rapid response to performance changes in the This control checks whether AWS X-Ray active tracing is enabled for your Amazon API Gateway REST API Gateway REST API stages should have AWS X-Ray Responses, and the requestId for AWS integration endpoints.įor detailed instructions on how to generate and configure API Gateway REST API SSLĬertificates, see Generate and configure an SSL certificate for backend authentication in the API Gateway Developer Guide. The stages include API integration backend responses, Lambda authorizer WebSocket API execution logging provides detailed records of requests made to API Gateway REST and The control fails if logging is not enabled for all methods of a stage or ifĪPI Gateway REST or WebSocket API stages should have relevant logs enabled. This control checks whether all stages of an Amazon API Gateway REST or WebSocket API have loggingĮnabled. Resource type: AWS::ApiGateway::Stage, AWS::ApiGatewayV2::StageĪWS Config rule: api-gw-execution-logging-enabled API Gateway REST and WebSocket API logging should It sends these notifications 45 days, 30 days, 7 days, and 1 dayĭNS in the AWS Certificate Manager User Guide.
#KNET WONT LOAD CLASS AMAZON MANUAL#
If it cannot validate a domain name, then ACM sends a notification that manual 60 days before theĮxpiration, ACM verifies that the certificate can be renewed. For domains validated by DNSĪCM automatically renews certificates that use DNS validation. To validate the domains and complete the renewal, you must respond toįor more information, see Renewal for domains validated byĮmail in the AWS Certificate Manager User Guide. When a certificate is 45 days from expiration, ACM sends to the domain owner an emailįor each domain name. Controls categorized by serviceĪWS WAF Imported and ACM-issued certificates should be renewed after a specified time periodĬategory: Protect > Data protection > Encryption of dataĪWS Config rule: acm-certificate-expiration-check Security Hub does not generate findings for that control. Note that gaps in the control numbers indicate controls that are not yet released. The required AWS Config rule, and any specific parameter values set by AWS Security Hub We also list dependent resources for which you should enable AWS Config recording for the control to work. The applicable resource that the control evaluates.
For descriptions of the categories, see Control categories. The category that the control applies to.
0 kommentar(er)
