How to disable default endpoint in AWS appsync

I have created a custom domain for appsync api and now I want to disable the default endpoint. Is there any work around to disable it?

主题

无服务器前端 Web 和移动应用程序集成

标签

AWS AppSync AWS Amplify

语言

English

sgupta07

已提问 2 年前366 查看次数

1 回答

最新
投票最多
评论最多

已接受的回答

Hi, @sgupta07

Unfortunately, AppSync doesn't have the ability to disable the default endpoint like API Gateway does.

I came up with an alternative. (But not perfect)

You can assign AWS WAF ACLs to AppSync.
Using this mechanism, you can block access by directly specifying the default domain by blocking if the "host" header is not a custom domain in the WAF rule.

https://docs.aws.amazon.com/appsync/latest/devguide/WAF-Integration.html

专家

iwasa

已回答 2 年前

sgupta07
2 年前
Thank you @iwasa. This solution seems to to block the default endpoint. Why do you think it's not perfect?
iwasa 专家
2 年前
Cases controlled by the host header can also be called by requesting the default endpoint by sending a custom domain in the host header at the time of request.
sgupta07
2 年前
@iwasa. I'm sorry for asking again. Is there any way we can make the host header secure? So that default endpoint can't be accessed.

How to disable default endpoint in AWS appsync

相关内容