---
id: 3915
title: "The Unmask IAM Permission: API Gateway Access Logging"
source_domain: bishopfox.com
source_url: "https://bishopfox.com/blog/unmask-iam-permissions-api-gateway-access-logging"
published_at: "2024-06-06T00:00:00Z"
tags: ["cloud", "cloud-security", "aws", "data-protection", "iam", "api-gateway", "access-logging"]
phying_url: "https://phying.com/item/3915"
lang: en
---

# The Unmask IAM Permission: API Gateway Access Logging

## Summary

Bishop Fox explains that AWS API Gateway access logs aren't encrypted by default and are readable with the right IAM permission, then shows how data protection policies can mask secrets like AWS keys.

## Intelligence Metadata

- **Sources:** bishopfox.com
- **Published:** 2024-06-06T00:00:00Z
- **Original:** https://bishopfox.com/blog/unmask-iam-permissions-api-gateway-access-logging
- **Phying News:** https://phying.com/item/3915