0
votes

With AWS API Gateway, is there a way to send a request through a corporate proxy? Let's say that I have a service that will only accept traffic sourced from http://proxy.my-proxy.domain.com:8000.

If the above is not possible, is there a way to send requests with an IP from my VPC CIDR?

  • NOTE - This is a private API Gateway with all VPC-E configured correctly.
  • NOTE - As I am merely a simpleton, I do not have privileges to modify this proxy.
  • NOTE - I'd rather not use lambda (if possible)
2

2 Answers

0
votes

Private endpoints are only private within the AWS ecosystem, they cannot be utilized outside them unless you establish connectivity between AWS VPC and your corporate network.

There are three ways to achieve this as far as i know

  1. You can make your API Gateway be public and use WAF to control access to it. You can whitelist only your corporate proxy IP addresses that are only allowed to access this gateway.

  2. Establish a VPN connection between your AWS VPC and the corporate network. This will allow you to use private endpoints without making them public using a secure encrypted pipe

  3. Setup AWS Direct Connect between your AWS VPC and the corporate network. This may not be an option considering the cost to the value proposition

0
votes

I just ended up using Lambda attached to my VPC w/ API Gateway proxy integration.