{"slug":"iam-aws-apigateway","cloud":"aws","service":"apigateway","title":"AWS API Gateway (IAM)","description":"Creates, publishes, maintains, monitors, and secures REST, HTTP, and WebSocket APIs at any scale.","category":"networking","common_permissions":["apigateway:GetPortal","apigateway:ListPortals","apigateway:GetProductPage","apigateway:ListProductPages","apigateway:GetRoutingRule","apigateway:ListRoutingRules"],"least_privilege_example":"{\n  \"Version\": \"2012-10-17\",\n  \"Statement\": [\n    {\n      \"Effect\": \"Allow\",\n      \"Action\": [\n        \"apigateway:GetPortal\",\n        \"apigateway:ListPortals\",\n        \"apigateway:GetProductPage\",\n        \"apigateway:ListProductPages\",\n        \"apigateway:GetRoutingRule\",\n        \"apigateway:ListRoutingRules\"\n      ],\n      \"Resource\": \"*\"\n    }\n  ]\n}","warnings":["Avoid apigateway:* — grants full control including creating, updating, and deleting APIs and their configurations.","Avoid apigateway:DeletePortal — allows deletion of portals, causing loss of API configurations."],"docs":"https://servicereference.us-east-1.amazonaws.com/v1/apigateway/apigateway.json","tags":["iam","aws"],"last_verified":"2026-06-14T00:00:00.000Z","next_check":"2026-12-11T00:00:00.000Z","created_at":"2026-06-14T04:49:18.300Z","updated_at":"2026-06-14T04:49:18.300Z"}