<!-- Copyright (c) 2026 defconxt. All rights reserved. -->
<!-- Licensed under AGPL-3.0 — see LICENSE file for details. -->
<!-- NERF is a trademark of defconxt. -->
# Cloud API Gateway Security — API Reference

## AWS API Gateway CLI

```bash
aws apigateway get-rest-apis --output json
aws apigateway get-resources --rest-api-id ID --output json
aws apigateway get-method --rest-api-id ID --resource-id RID --http-method GET
aws apigateway get-stages --rest-api-id ID --output json
aws apigateway get-usage-plans --output json
aws wafv2 list-web-acls --scope REGIONAL --output json
```

## Authentication Types

| Type | Description |
|------|-------------|
| `NONE` | No authentication (dangerous) |
| `AWS_IAM` | IAM signature v4 |
| `CUSTOM` | Lambda authorizer |
| `COGNITO_USER_POOLS` | Cognito JWT |
| `API_KEY` | API key (not sole auth) |

## GCP API Gateway

```bash
gcloud api-gateway apis list
gcloud api-gateway api-configs describe CONFIG --api=API
gcloud api-gateway gateways describe GW --location=REGION
```
