api-security-labs-owasp-aws

This repository contains a comprehensive API security project that demonstrates the identification, exploitation, and remediation of OWASP API Top 10 vulnerabilities using AWS API Gateway, Amazon Cognito, OAuth 2.0 / OIDC, and JWT-based authentication.

Technologies Used

• AWS API Gateway (HTTP API)
• Amazon Cognito (User Pools)
• OAuth 2.0 Authorization Code Grant
• OpenID Connect (OIDC)
• JWT Authentication & Authorization
• OWASP API Security Top 10
• Postman

Key Features

• Secure API Gateway with JWT Authorizer
• OAuth2/OIDC token flow implementation
• HTTPS-only enforcement
• Rate limiting via API Gateway throttling
• Access control at gateway level
• OWASP API Top 10 vulnerability mitigation

Learning Outcomes

• Designed and secured APIs using cloud-native security controls
• Implemented OAuth2/OIDC authentication flows
• Mapped real vulnerabilities to OWASP API Top 10
• Applied defense-in-depth at the API gateway layer