I'm working on a project using Amazon API Gateway and wonder if there's a way through the AWS SDK or over REST to programmatically create API keys for monitoring requests:
It seems like they want you to use a custom authenticator for security purposes - over depending on an AWS API key. Using an application user for IAM I was thinking my application user would make the actual requests with the AWS IAM key and secret key then add on a user's particular API key for request counts / rate limiting.
Does this approach make sense?
Thanks.