API Gateway Logging is Disabled

Overview

Check if API Gateway Stage has logging enabled. API Gateway supports both execution and access logging. Without logging enabling, service usage monitoring becomes impossible. To achieve real-time monitoring of API calls, you can direct CloudTrail Logs to CloudWatch Logs and set up corresponding metric filters and alarms.

Vendor

AWS

Cloud Service

API Gateway

Related Controls

APIGateway.1

References

https://docs.aws.amazon.com/apigateway/latest/developerguide/set-up-logging.html, https://docs.aws.amazon.com/apigateway/latest/api/API_RestApi.html, https://docs.aws.amazon.com/apigateway/latest/api/API_Stage.html

Severity

3

Item Types

AWS::ApiGateway::RestApi