AWS, Security, Architecture, Authentication, Authorization.
access. In addition, if attackers gain access to one of the VPCs, they can communicate freely with your service because your service accepts any incoming calls. However, combining IAM authentication and authorization with VPC provides the best and most comprehensive security for your API Gateway.