
Amazon API Gateway now supports enhanced TLS security policies for REST APIs and custom domain names, offering options like TLS 1.3 only, Perfect Forward Secrecy, FIPS compliance, and Post Quantum Cryptography at no additional cost.


<div><p>This article announces enhanced TLS security policies for Amazon API Gateway REST APIs and custom domain names.</p><ul><li>New TLS security policies including TLS 1.3-only, Perfect Forward Secrecy, FIPS compliance options</li><li>Post Quantum Cryptography support for future-proofing API security</li><li>Endpoint access control for additional governance capabilities</li><li>Available at no additional cost across all API endpoint and custom domain types</li><li>Supported in 30+ AWS regions globally including US, Europe, Asia Pacific, and Middle East</li></ul><p>API Gateway now offers granular TLS security controls to help customers meet regulatory requirements and strengthen API encryption without additional charges.</p></div>


Amazon API Gateway now supports additional TLS security policies for REST APIs

Related articles

Related articles

Nov 21
2025
Enhancing API security with Amazon API Gateway TLS security policies

Jan 23
2024
Consuming private Amazon API Gateway APIs using mutual TLS

Jun 7
2024
Amazon API Gateway customers can easily secure APIs using Amazon Verified Permissions

Jun 3
2025
Amazon API Gateway introduces routing rules for REST APIs