SEC 1: How do you control access to your Serverless API? The security pillar includes the ability to protect information, systems, and assets while delivering business value through risk assessments and mitigation strategies. Note - The content for this section is a subset of the Serverless Lens Whitepaper with some minor tweaks. Well Architected Whitepaper The Security Pillar We believe that having well-architected systems greatly increases the likelihood of business success. It provides a way for you to consistently measure your architectures against best practices and identify areas for improvement.

By using the Framework, you will learn architectural best practices for designing and operating reliable, secure, efficient, and cost-effective systems in the cloud. The AWS Well-Architected Framework helps you understand the pros and cons ofĭecisions you make while building systems on AWS. This waf stack could be used for any resource that you can attach a WAF rule to ( Such as a load balancer / Cloudfront distribution etc) simply by passing the resources ARN to the stack. It demonstrates a geo-matching rule, and the use of some AWS managed rulesets. THe WAF stack creates a WAF WebACL and attaches it to the the apigateway. The apigateway stack creates a trival REST apigateway, with a single method which returns 'hello world!' to a GET request. This is a cdk stack to deploy a simple API gateway, and attach a WAF (Web Application Firewall) from Andrew Frazer ( ).

Aws api gateway waf