AWS, Security, Architecture, Authentication, Authorization.
endpoints. We can define a fine-grained definition and decide exactly what endpoint each service can communicate with. Here’s an example of such a resource policy for service C API Gateway: In lines 8–9, we can allow an entire account (principal) such as the account of service A or B’s account or a