Help Center/ Config/ User Guide/ Resource Compliance/ Built-In Policies/ API Gateway/ Dedicated API Gateways Have an Authorization Type Set
Updated on 2025-08-25 GMT+08:00
View PDF
Share

Dedicated API Gateways Have an Authorization Type Set

Rule Details

Table 1 Rule details

Parameter

Description

Rule Name

apig-instances-authorization-type-configured

Identifier

Dedicated API Gateways Have an Authorization Type Set

Description

If no authentication is set for a dedicated API gateway, this API gateway is non-compliant.

Tag

apig

Trigger Type

Configuration change

Filter Type

apig.instances

Rule Parameters

None

Application Scenarios

When creating an API, you need to ask for identity authentication, for example, with IAM or an authentication app provided by the API Gateway, to prevent malicious API calls. For details, see How Do I Ensure API Calling Security?

Solution

Set an authentication mode for API calls, for example, with an authentication app or Huawei Cloud IAM. You can also create custom authorizer. For details, see Creating a Custom Authorizer.

Rule Logic

  • If no authentication is set for a dedicated API gateway, this API gateway is non-compliant.
  • If an authentication method is set for a dedicated API gateway, this API gateway is compliant.
Parent topic: API Gateway