Amazon API Gateway adds mutual TLS for backend integrations
Amazon API Gateway REST APIs now support mutual TLS (mTLS) for backend integrations, allowing the service to present an AWS Certificate Manager (ACM) certificate during the TLS handshake. This enhancement enables integration endpoints to validate API Gateway's identity, ensuring secure connections from trusted sources. It is particularly important for regulated industries like financial services and healthcare, as well as zero-trust environments. The feature is available in all commercial and AWS GovCloud regions and can be configured via the console, CLI, or CloudFormation.
Features (1) ›
- Mutual TLS for API Gateway backend integrations
Amazon API Gateway REST APIs can now present AWS Certificate Manager (ACM) certificates to backend integrations during the TLS handshake. This enables backend endpoints to cryptographically verify the connection source, enhancing security and compliance, and supporting requirements in regulated and zero-trust environments.
https://aws.amazon.com/about-aws/whats-new/2026/09/amazon-api-gateway-mutual-tls-backend/
Related releases
- AWS Announces General Availability of OpenAI GPT-6 Astra on Amazon Bedrock AWS What's New ·
- AWS launches Nx Plugin 1.0 for scaffolding full-stack applications AWS What's New ·
- Amazon S3 Object Lock now supports variable retention with event holds AWS What's New ·
- Amazon Timestream for InfluxDB 3 now supports custom Python plugins AWS What's New ·
- Amazon SageMaker Feature Store now supports individual feature updates AWS What's New ·
- AWS Transform Now Available in GovCloud (US-West) AWS What's New ·