How to implement client certificate revocation list checks at scale with API Gateway

ityAs you design your Amazon API Gateway applications to rely on mutual certificate authentication (mTLS), you need to consider how your application will verify the revocation status of a client certificate. In your design, you should account for the performance and availability of your verification mechanism to make sure that your application endpoints perform reliably. […]

account advanced (300) amazon amazon api gateway api api gateway application applications authentication availability certificate client compliance crl design gateway identity list mechanism mtls ocsp performance scale security security blog technical how-to tls verification verify