Rule: API Gateway Stage Cache Encryption at Rest Should Be Enabled

Rule Description:

Troubleshooting Steps:

2. 1.
   Non-compliance with GDPR requirements for data protection.
4. 2.
   Increased risk of data breaches and unauthorized access to sensitive information.

Necessary Codes:

Step-by-Step Guide for Remediation:

2. 1.
   Open the AWS Management Console and navigate to the API Gateway service.
4. 2.
   Select the API Gateway instance you wish to configure.
6. 3.
   In the left sidebar, click on "Stages" to view the available stages for the selected API.
8. 4.
   Select the stage for which you want to enable cache encryption.
10. 5.
    Under the selected stage, click on the "Settings" tab.
12. 6.
    Scroll down to the "Cache Settings" section.
14. 7.
    Enable the "Encrypt cache data at rest" option.
16. 8.
    Save the changes.

2. 1.

   Open the AWS CLI on your local machine or use the AWS CLI integrated in the AWS Management Console.

4. 2.

   Run the following command to enable cache encryption for the desired stage:

   aws apigateway update-stage --rest-api-id <rest-api-id> --stage-name <stage-name> --patch-operations op='replace',path='/cacheClusterEnabled',value='True' --patch-operations op='replace',path='/cacheClusterSize',value='<cache-size>' --patch-operations op='replace',path='/cacheClusterConfig/enabled',value='True' --patch-operations op='replace',path='/cacheClusterConfig/encrypted',value='True'
   

   Replace

   <rest-api-id>

   with the ID of your API Gateway and

   <stage-name>

   with the name of the desired stage. Additionally, provide the desired cache size within

   <cache-size>

   .

6. 3.

   Wait for the command to execute successfully. Once complete, the cache encryption at rest will be enabled for the specified stage.