skills.rest
aurainfosec
aurainfosecOFFICIAL
Explore all skills by this author →
WebsiteGitHub

api-gateway

Automate AWS API Gateway configuration and troubleshooting for REST and HTTP APIs.

Updated Feb 16, 2026
Search Tags:#rate limiting#lambda integration#aws api gateway#api authorization#jwt authorizer#cors troubleshooting#tls validation
One-click install
npx skills add https://github.com/aurainfosec/cloud-review-automation-poc --skill api-gateway-aurainfosec
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: api-gateway
Source: https://github.com/aurainfosec/cloud-review-automation-poc/tree/main/skills/api-gateway
Command: npx skills add https://github.com/aurainfosec/cloud-review-automation-poc --skill api-gateway-aurainfosec

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Help you design, configure, and validate AWS API Gateway endpoints so you can publish secure REST, HTTP, and WebSocket APIs with the right authorization, routing, integrations, and operational settings.

Core Features & Use Cases

  • Provision common API Gateway components: create APIs (HTTP and REST), routes/methods, integrations (Lambda, HTTP, AWS services), and stages.
  • Harden and control access: configure authorization (including JWT authorizers), API keys/usage plans, throttling, and security logging.
  • Diagnose real-world issues: troubleshoot 403/502/504 errors, CORS failures, and confirm external reachability with an unauthenticated probe and TLS checks.

Quick Start

Ask: "Use API Gateway to create a private-by-auth HTTP endpoint backed by Lambda, enable JWT authorization, and verify externally with curl to confirm only 401/403 responses occur when unauthenticated."

Frequently Asked Questions about api-gateway

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I configure a JWT authorizer for an AWS API Gateway HTTP endpoint?▼

You configure a JWT authorizer for an AWS API Gateway HTTP endpoint by provisioning the API, attaching the JWT authorizer to the route, and deploying the stage. Unauthenticated HTTP probes can then verify that only 401 or 403 responses occur without valid tokens.

What's the best way to troubleshoot CORS failures on AWS API Gateway?▼

Troubleshooting CORS failures on AWS API Gateway involves verifying route CORS configurations, ensuring integration responses include required headers, and deploying changes. Access logging can then pinpoint exact request rejection points.

Why does my API Gateway return 403 or 502 errors after Lambda integration?▼

API Gateway returns 403 or 502 errors after Lambda integration due to missing authorization, incorrect integration URIs, or backend timeouts. Diagnose these issues by validating authorization behavior with unauthenticated probes and reviewing access logs.

How do I set up rate limiting and API keys for AWS API Gateway usage plans?▼

You set up rate limiting and API keys for AWS API Gateway usage plans by creating a usage plan, defining throttling limits, generating API keys, and associating the keys with your deployed API stage to control traffic.

Can I validate external reachability and TLS configuration for a private API Gateway endpoint?▼

Yes, you can validate external reachability and TLS configuration for a private API Gateway endpoint by applying unauthenticated HTTP probes and TLS checks. These confirm the endpoint rejects unauthorized access while maintaining secure connections.

Related Skills

Explore More Software Engineering Skills→
HillBombCreationsHillBombCreations

vivreal-websocket-realtime

Manage WebSocket connections and message delivery via API Gateway and Lambda.

Official
Intermediate
dgethingsdgethings

aws-cloud-monitoring

Monitor AWS network health via CloudWatch metrics, alarms, and logs.

Community
Intermediate
itsmostafaitsmostafa
1.1k

secrets-manager

Store, retrieve, and rotate secrets with AWS Secrets Manager APIs.

Community
Advanced
david-2814david-2814
3

appsync

Create and manage AWS AppSync GraphQL APIs, data sources, resolvers, and API keys.

Community
Advanced