Free AWS Security Whitepaper
    Toc Consulting Logo
    All Tags

    Authorization

    2 items across 2 sections

    Blog Posts1

    Custom Security Requirements

    Part 6 of 16 in the AWS Security Agent: From Zero to Hero series. How I wrote one custom security requirement, an IDOR authorization check, and turned a 9/10 code review detection rate into 10/10. The five-field form, character limits, and the worked example, all from a controlled experiment.

    9 min read · 2026-07-29
    Best Practices1

    Amazon API Gateway Security Best Practices

    Comprehensive guide to securing Amazon API Gateway. Covers authentication with Cognito and Lambda authorizers, mutual TLS, WAF integration, resource policies, throttling and usage plans, private APIs with VPC endpoints, access logging, SSL/TLS enforcement, and request validation.

    15 min read

    Related Tags

    AWS Security53AWS Security Agent16AppSec13waf9API Gateway5Authentication4Cognito4Code Review3IDOR3REST API2WebSocket2Resource Policy2

    Need Help with AWS Security?

    Our AWS security experts can help you implement best practices across all these topics.

    Contact Us