AWS recently introduced a new capability for Amazon API Gateway featuring dynamic routing rules for custom domain names - allowing users to route API requests based on HTTP header values, either ...
Security researcher Piyush Gupta discovered that adding a trailing slash to API paths on AWS HTTP API, the newer and cheaper variant of API Gateway, could bypass Lambda authorizer authentication ...