Looking for a best-practice for building serverless application with amplify and api gateway and lambda

0

A customer is building a trivia app for sporting events. One component of the system is a mobile app that communicates with a back-end to get the questions.

They are building the app using Amplify. This will communicate with API Gateway which will in turn call Lambda functions. They are aware that people may try to break the game and are looking for some security best-practices for building the app.

So far, we have been talking about

  • Use WAF with API Gateway
  • Store secrets (such as DB connection strings) using Secrets Manager
  • use Cognito or similar authentication to secure connections with API Gateway

Are there other services or approaches that people would recommend?

1回答
1
承認された回答

Also worth looking at Building an Serverless Airline booking application series on Twitch. All sessions are recorded.

Architect an Airline Booking Application, End-to-End

aws-serverless-airline-booking

AWS
エキスパート
回答済み 5年前
profile picture
エキスパート
レビュー済み 6ヶ月前

ログインしていません。 ログイン 回答を投稿する。

優れた回答とは、質問に明確に答え、建設的なフィードバックを提供し、質問者の専門分野におけるスキルの向上を促すものです。

質問に答えるためのガイドライン

関連するコンテンツ