nerdexam
GIAC

GCIH · Question #803

With what frequency does the AWS API Gateway assign a new IP address?

The correct answer is D. Unique Source IP. AWS API Gateway assigns a different outbound IP address for each unique source IP that makes a request through it, making it effective as an IP rotation proxy.

Cloud Incident Response & Threat Hunting

Question

With what frequency does the AWS API Gateway assign a new IP address?

Options

  • AUnique Session
  • BEach Second
  • CEach Request
  • DUnique Source IP

How the community answered

(26 responses)
  • A
    4% (1)
  • C
    4% (1)
  • D
    92% (24)

Why each option

AWS API Gateway assigns a different outbound IP address for each unique source IP that makes a request through it, making it effective as an IP rotation proxy.

AUnique Session

IP assignment is not tied to session state - the mapping is driven by the unique source IP of the incoming request, not by the establishment or teardown of a session.

BEach Second

AWS API Gateway does not rotate IPs on a per-second time interval; the IP presented to the destination is determined by the incoming request's source IP, not a time-based mechanism.

CEach Request

A new IP is not guaranteed for every individual request - repeated requests from the same source IP will present the same outbound IP; the rotation occurs across different unique source IPs.

DUnique Source IPCorrect

AWS API Gateway routes requests through AWS infrastructure and presents a distinct AWS-owned IP address to the destination server for each unique source IP that sends traffic through the gateway. This per-unique-source-IP behavior means a target sees different IPs depending on who is making the request, which is commonly exploited to bypass IP-based rate limiting and access controls.

Concept tested: AWS API Gateway IP rotation per unique source IP

Source: https://docs.aws.amazon.com/apigateway/latest/developerguide/api-gateway-request-throttling.html

Topics

#AWS API Gateway#IP rotation#cloud evasion#reconnaissance

Community Discussion

No community discussion yet for this question.

Full GCIH Practice