- Ensure IAM Access Analyzer has no active findings
- Ensure ACM certificates do not expire within 7 days
- Ensure ACM certificates have Certificate Transparency logging enabled
- Ensure API Gateway REST APIs require authorization
- Ensure API Gateway has client certificate enabled to access your backend endpoint