More Info:

Content Encoding feature should be enabled for your Amazon API Gateway APIs in order to facilitate API payload compression.

Risk Level

Low

Address

Reliability, Security

Compliance Standards

CBP

Triage and Remediation

Check Cause

  1. Log in to the AWS Management Console and navigate to the API Gateway service.

  2. In the API Gateway dashboard, select the API you want to inspect.

  3. In the left navigation pane, under the selected API, click on “Resources”. This will display a list of all the resources and methods associated with the selected API.

  4. Click on a method (like GET or POST) under a resource. In the Method Execution pane, click on “Method Response”. If the HTTP status row (like 200) does not have “Content-Encoding: gzip” in the “Response Headers for 200” section, then content encoding is not enabled for the API.

Additional Reading: