More Info:

Default Execution Endpoint should not be enabled for your Amazon API Gateway APIs in order to secure your APIs.

Risk Level

Low

Address

Reliability, Security

Compliance Standards

CBP

Triage and Remediation

Remediation

Sure, here are the steps to remediate the “Default Execution Endpoint Should Not Be Enabled” misconfiguration in AWS using the AWS console:

  1. Log in to your AWS console and navigate to the AWS Lambda service.

  2. From the list of functions, select the function that has the default execution endpoint enabled.

  3. Click on the “Configuration” tab for the selected function.

  4. In the “General configuration” section, scroll down to the “Network” section.

  5. Under the “Network” section, you will see an option called “VPC”. Click on the “Edit” button next to it.

  6. In the “VPC configuration” section, you will see an option called “Default execution endpoint”. Ensure that this option is set to “Disabled”.

  7. If the “Default execution endpoint” option is enabled, click on the “Disable” button to disable it.

  8. Once you have disabled the “Default execution endpoint” option, click on the “Save” button to save the changes.

  9. Verify that the changes have been applied by testing the function.

By following these steps, you should be able to remediate the “Default Execution Endpoint Should Not Be Enabled” misconfiguration in AWS using the AWS console.

Additional Reading: