Set up API keys for REST APIs in API Gateway - Amazon API Gateway
Require an API key on a methodCreate an API keyImport API keys

Set up API keys for REST APIs in API Gateway

To set up API keys, do the following:

  • Configure API methods to require an API key.

  • Create or import an API key for the API in a Region.

Before setting up API keys, you must have created an API and deployed it to a stage. After you create an API key value, it cannot be changed.

For instructions on how to create and deploy an API by using the API Gateway console, see Develop REST APIs in API Gateway and Deploy REST APIs in API Gateway, respectively.

After you create an API key, you must associate it with a usage plan. For more information, see Set up usage plans for REST APIs in API Gateway.

Note

For best practices to consider, see Best practices for API keys and usage plans.

Require an API key on a method

The following procedure describes how to configure an API method to require an API key.

AWS Management Console
To configure an API method to require an API key

  1. Sign in to the API Gateway console at https://console.aws.amazon.com/apigateway.

  2. Choose a REST API.

  3. In the API Gateway main navigation pane, choose Resources.

  4. Under Resources, create a new method or choose an existing one.

  5. On the Method request tab, under Method request settings, choose Edit.

    Add an API key to a method

  6. Select API key required.

  7. Choose Save.

  8. Deploy or redeploy the API for the requirement to take effect.

If the API key required option is set to false and you don't execute the previous steps, any API key that's associated with an API stage isn't used for the method.

AWS CLI

The following put-method command creates a PUT method that requires an API key:

aws apigateway put-method \
    --rest-api-id 1234123412 \
    --resource-id a1b2c3 \
    --http-method PUT \
    --authorization-type "NONE" \
    --api-key-required

The following update-method command updates an existing method to require an API key:

aws apigateway update-method \
    --rest-api-id 1234123412 \
    --resource-id a1b2c3 \
    --http-method PUT \
    --patch-operations op="replace",path="/apiKeyRequired",value="true"
REST API

To require an API key on a method, do one of the following:

  • Call method:put to create a method. Set apiKeyRequired to true in the request payload.

  • Call method:update to set apiKeyRequired to true.

Create an API key

The following procedure shows how to create an API key. If you want to import your API key, skip this step.

AWS Management Console
To create an API key

  1. Sign in to the API Gateway console at https://console.aws.amazon.com/apigateway.

  2. Choose a REST API.

  3. In the API Gateway main navigation pane, choose API keys.

  4. Choose Create API key.

    Create API keys for usage plans

  5. For Name, enter a name.

  6. (Optional) For Description, enter a description.

  7. For API key, choose Auto generate to have API Gateway generate the key value, or choose Custom to create your own key value.

  8. Choose Save.

AWS CLI

The following create-api-key command creates an API key:

 aws apigateway create-api-key \
    --name 'Dev API key' \
    --description 'API key for Devs' \
    --enabled
REST API

Call apikey:create to create an API key.

Import API keys

The following procedure describes how to import API keys. If you already created an API key, skip this step.

AWS Management Console
To import API keys

  1. Sign in to the API Gateway console at https://console.aws.amazon.com/apigateway.

  2. Choose a REST API.

  3. In the main navigation pane, choose API keys.

  4. Choose the Actions dropdown menu, and then choose Import API keys.

  5. To load a comma-separated key file, choose Choose file. You can also enter the keys in the text editor. For information about the file format, see API Gateway API key file format.

  6. Choose Fail on warnings to stop the import when there's an error, or choose Ignore warnings to continue to import valid key entries when there's an warning.

  7. Choose Import to import your API keys.

AWS CLI

The following import-api-keys command imports an API key:

aws apigateway import-api-key \
    a--body fileb://keys.csv \
    --format csv
REST API

Call apikey:import to import an API key from a file. For the file format, see API Gateway API key file format.

You cannot change the value of the new API key. After you create your API, you configure a usage plan. For more information, see Set up usage plans for REST APIs in API Gateway.