← ALL NOTES
AWS

aws-apigw-stage-audit — find the API Gateway stages with no log, no limit and no authorizer

Every API Gateway stage I have inherited was created by someone testing an idea and promoted to production by nobody in particular. The console does not ask for a throttle, so there is none, and the account-level 10000 rps is the only limit between one broken retry loop and every other API in the account. This audits every REST and HTTP stage in a region and prints the ones with no log, no limit and no authorizer, with the fix.

Loading…