{
  "Provider": "aws",
  "CheckID": "apigatewayv2_access_logging_enabled",
  "CheckTitle": "Ensure API Gateway V2 has Access Logging enabled.",
  "CheckType": [
    "IAM"
  ],
  "ServiceName": "apigateway",
  "SubServiceName": "rest_api",
  "ResourceIdTemplate": "arn:partition:service:region:account-id:resource-id",
  "Severity": "medium",
  "ResourceType": "AwsApiGatewayV2Api",
  "Description": "Ensure API Gateway V2 has Access Logging enabled.",
  "Risk": "If no authorizer is enabled anyone can use the service.",
  "RelatedUrl": "",
  "Remediation": {
    "Code": {
      "CLI": "",
      "NativeIaC": "",
      "Other": "https://docs.bridgecrew.io/docs/bc_aws_logging_30#aws-console",
      "Terraform": "https://docs.bridgecrew.io/docs/bc_aws_logging_30#cloudformation"
    },
    "Recommendation": {
      "Text": "Monitoring is an important part of maintaining the reliability, availability and performance of API Gateway and your AWS solutions. You should collect monitoring data from all of the parts of your AWS solution. CloudTrail provides a record of actions taken by a user, role, or an AWS service in API Gateway. Using the information collected by CloudTrail, you can determine the request that was made to API Gateway, the IP address from which the request was made, who made the request, etc.",
      "Url": "https://docs.aws.amazon.com/apigateway/latest/developerguide/security-monitoring.html"
    }
  },
  "Categories": [],
  "DependsOn": [],
  "RelatedTo": [],
  "Notes": ""
}
