AWS API Gateway: limit requests from a single IP

Question

Does AWS API Gateway allows limiting a number of requests from a single IP?

I'm building a public API and would like to prevent it from being abused by establishing a limit on a number of times the API can be called from a single IP address (like 100 requests per minute).

Thanks,

Answer 1

AWS API Gateway does not offer the functionality that you are looking for but there is a workaround.

What you can do is Integrate AWS API gateway with AWS Cloud Front and use AWS Web Application Firewall Rules to limit the API call from a Specific IP address.

Check this Guide for implementing the WAF. http://docs.aws.amazon.com/waf/latest/developerguide/tutorials-rate-based-blocking.html