creating-api-gateway-stage

Creates API Gateway stages with CloudWatch logging, X-Ray tracing, throttling, and WAF integration.

Updated Jul 21, 2026
One-click install
npx skills add https://github.com/richardnroman/Synthetic-Data-Exchange-Licensing-Platform --skill creating-api-gateway-stage-richardnroman
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: creating-api-gateway-stage
Source: https://github.com/richardnroman/Synthetic-Data-Exchange-Licensing-Platform/tree/main/.agents/skills/creating-api-gateway-stage
Command: npx skills add https://github.com/richardnroman/Synthetic-Data-Exchange-Licensing-Platform --skill creating-api-gateway-stage-richardnroman

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve? Deploying an API Gateway stage for a new environment requires coordinating many AWS resources—IAM roles, CloudWatch log groups, throttling limits, WAF web ACLs, and authorization settings—and missing any step leaves the API unmonitored or unsecured. ## Core Features & Use Cases - Full Stage Provisioning: Creates the stage from an existing REST API and deployment, with stage variables, X-Ray tracing, and data tracing configured. - Observability Setup: Configures the CloudWatch Logs IAM role, log groups with retention policies, access logging, execution logging, and method-level metrics. - Security Controls: Applies throttling rate and burst limits, creates and associates a WAFv2 web ACL with AWS managed rule sets, and guides authorization configuration (IAM, API keys, Lambda authorizers). - Use Case: When promoting a REST API from dev to production, run this procedure to create the prod stage with logging, throttling, and WAF protection, then validate the setup with the provided AWS CLI test commands. ## Quick Start Ask the agent to create an API Gateway stage named prod for your REST API ID and deployment ID with logging, throttling, and WAF enabled.

Frequently Asked Questions about creating-api-gateway-stage

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I create an API Gateway stage with CloudWatch logging?▼

Create the stage with aws apigateway create-stage, then configure the account-level CloudWatch IAM role, create a log group, and enable access and execution logging via update-stage patch operations. This procedure automates all of those steps in order.

How to enable WAF on an API Gateway stage?▼

Create a WAFv2 web ACL with REGIONAL scope and AWS managed rule sets, then associate it with the stage resource ARN using aws wafv2 associate-web-acl. The procedure does this automatically when the enable_waf parameter is true.

What parameters are required to create an API Gateway stage?▼

The required inputs are the REST API ID, stage name, and deployment ID. Optional parameters include log level, metrics toggle, data tracing, throttling rate and burst limits, and the WAF enable flag.

Why are CloudWatch logs not appearing for my API Gateway stage?▼

Missing logs usually mean the account-level CloudWatch role is not set, the log group does not exist, or logging is not enabled at both stage and method levels. Verify the cloudwatchRoleArn in aws apigateway get-account and the method settings via get-stage.

Can I configure throttling limits per API Gateway stage?▼

Yes, throttling rate and burst limits are set with aws apigateway update-stage patch operations on the /*/*/throttling/rateLimit and burstLimit paths. Defaults are 1000 requests per second and a 2000 burst limit.