AWS API Gateway not private

Updated: February 25, 2026

Findings Design Based Findings API Finding

Description

Severity: Low

A private API Gateway is configured with an IAM policy that allows public access.

Remediation

Review and update the IAM policy attached to the API Gateway to ensure it restricts access appropriately.

Need help?

Contact FireTail support