December 2019
Intermediate to advanced
382 pages
9h 43m
English
Content preview from Learn AWS Serverless Computing
Become an O’Reilly member and get unlimited access to this title plus top books and audiobooks from O’Reilly and nearly 200 top publishers, thousands of courses curated by job role, 150+ live events each month,
Start your free trial
Certificates
A security section wouldn't be complete without mentioning certificates and domains. Specifically, what options do we have for bringing our own SSL/TLS certificates and creating custom domain names?
When you create a new API, the endpoint starts with a domain provided by AWS:
https://api-id.execute-api.region.amazonaws.com
This endpoint is also protected by a certificate issued by Amazon. When we deploy our own APIs, we want the endpoints to match our own domains—at least in production, for example, https://api.mycompany.com.
Thankfully, AWS Certificate Manager (ACM, https://aws.amazon.com/certificate-manager/) is integrated into API Gateway, so we can use our own SSL/TLS certificate. To do so, we need to create or import a ...