Which compliance frameworks require ensure websocket apis have route authorization?

This security check is required by the following compliance frameworks: SOC 2, PCI-DSS.

HIGH

Ensure WebSocket APIs have route authorization

WebSocket API routes should have appropriate authorization configured.

Security Impact

Unauthorized WebSocket connections can receive real-time data.

How to Remediate

Configure authorization on $connect route. Use Lambda authorizers for connection validation.

Affected Resources

AWS::ApiGatewayV2::Route

Compliance Frameworks

SOC 2PCI-DSS

How TigerGate Helps

TigerGate continuously monitors your AWS environment to detect and alert on this misconfiguration. Here's what our platform does for this specific check:

Continuous Scanning
Automatically scans all Amazon API Gateway resources across your AWS accounts every hour
Instant Alerts
Get notified via Slack, email, or webhooks when this misconfiguration is detected
One-Click Remediation
Fix this issue directly from the TigerGate dashboard with our guided remediation
Compliance Evidence
Automatically collect audit evidence for SOC 2, PCI-DSS compliance
Drift Detection
Get alerted if this configuration drifts back to an insecure state after remediation