API Gateway integrated with WAF
AWS Web Application Firewall (WAF) should be integrated with API Gateway. This protects your APIs from common web exploits such as SQLi attacks, XSS attacks and Cross-Site Request Forgery (CSRF) attacks.
Addresses: Security