By using AWS re:Post, you agree to the AWS re:Post Terms of Use
AWS re:Postre:Post

CSRF Implementation for Cloudfront and Lambda

0

Hello experts, We have a backend that is lambda and UI(cloudfront) interacts with it via API Gateway. What is the best way to implement CSRF protection here?

Topics
ServerlessComputeFront-End Web & MobileNetworking & Content DeliveryAWS Well-Architected Framework
Tags
AWS LambdaAmazon API GatewaySecurity
Language
English
rePost-User-6302307
asked 8 months ago852 views
1 Answer
0

Hello.

AWS WAF can be configured for API Gateway and CloudFront.
So I think it is possible to add CSRF protection with AWS WAF.
https://docs.aws.amazon.com/apigateway/latest/developerguide/apigateway-control-access-aws-waf.html

profile picture
EXPERT
Riku_Kobayashi
answered 8 months ago
  • rePost-User-6302307
    8 months ago

    I need help with implementation and validation of CSRF token. I am aware of WAF but to enable it my application must be generating and injecting CSRF token, right?

You are not logged in. Log in to post an answer.

A good answer clearly answers the question and provides constructive feedback and encourages professional growth in the question asker.

Guidelines for Answering Questions

Relevant content