AWS API Gateway - 一切都“需要 API 密钥”

Question

Currently, this is how I am securing API gateway endpoints.

I set an API key and a usage plan and then for each endpoint:

"Endpoint > Method Request > API Key Required = true"

I would like to secure everything in the API this way. Is there a more convenient way to do it? Everything means all endpoints and all methods.

Answer 1

根据此处的AWS文档，API密钥是按每种方法进行管理的，因此不能在资源或全局API级别上应用。

Answer 2

In this answer https://stackoverflow.com/a/70296022/2692914 I've put a script for the part that enables the API key for all methods of certain API.

Also, you can find the script to enable the API key for all methods of an API Gateway API on this gist .