A company is using Amazon API Gateway to manage its public-facing API. The CISO requires that the APIs be used by test account users only. What is the MOST secure way to restrict API access to users of this particular AWS account?
A) Client-side SSL certificates for authentication
B) API Gateway resource policies
C) Cross-origin resource sharing (CORS)
D) Usage plans

Question

Quizplus · Accepted Answer

API Gateway resource policies can be used to restrict access to specific AWS accounts, ensuring that only users from the test account can access the API.

A Company Is Using Amazon API Gateway to Manage Its