---
title: api-gateway
---

# api-gateway

## Checks


- [enable-access-logging](enable-access-logging) API Gateway stages for V1 and V2 should have access logging enabled

- [enable-cache-encryption](enable-cache-encryption) API Gateway must have cache enabled

- [enable-tracing](enable-tracing) API Gateway must have X-Ray tracing enabled

- [no-public-access](no-public-access) No unauthorized access to API Gateway methods

- [use-secure-tls-policy](use-secure-tls-policy) API Gateway domain name uses outdated SSL/TLS protocols.



