github.com/aquasecurity/trivy-iac@v0.8.1-0.20240127024015-3d8e412cf0ab/avd_docs/aws/apigateway/AVD-AWS-0004/docs.md (about) 1 2 API Gateway methods should generally be protected by authorization or api key. OPTION verb calls can be used without authorization 3 4 ### Impact 5 API gateway methods can be accessed without authorization. 6 7 <!-- DO NOT CHANGE --> 8 {{ remediationActions }} 9 10