Use an OpenAPI specification to define API Gateway APIs. This is good practice because: The specification forces you to think about the…

Use an API Gateway Resource Policy to allow access to your APIs only from certain IPs. This is a handy approach for locking down your non…