This whitepaper provides best practice guidance for securing your workloads when using API Gateway. Building on the principles of the Security Pillar of the AWS Well-Architected Framework, the following design principles can help strengthen your security