# Bring your own client certificate for backend mTLS in Amazon API Gateway

DevFeed: [Bring your own client certificate for backend mTLS in Amazon API Gateway](<https://devfeed.tech/articles/bring-your-own-client-certificate-for-backend-mtls-in-amazon-api-gateway-4658.md>)

Original publisher: [Read original article](<https://aws.amazon.com/blogs/compute/bring-your-own-client-certificate-for-backend-mtls-in-amazon-api-gateway/>)

Author: Biswanath Mukherjee

Published: 2026-09-08T21:46:39Z

Content type: tutorial

Language: en

Sources: [AWS Compute Blog](<https://devfeed.tech/sources/aws-compute-blog.md>)

Topics: [Amazon API Gateway](<https://devfeed.tech/topics/amazon-api-gateway.md>), [AWS Certificate Manager](<https://devfeed.tech/topics/aws-certificate-manager.md>), [Amazon Elastic Container Service](<https://devfeed.tech/topics/amazon-elastic-container-service.md>), [nginx](<https://devfeed.tech/topics/nginx.md>)

Tags: [amazon-api-gateway](<https://devfeed.tech/tags/amazon-api-gateway.md>), [amazon-elastic-container-service](<https://devfeed.tech/tags/amazon-elastic-container-service.md>), [announcements](<https://devfeed.tech/tags/announcements.md>), [architecture](<https://devfeed.tech/tags/architecture.md>), [authentication](<https://devfeed.tech/tags/authentication.md>), [aws-certificate-manager](<https://devfeed.tech/tags/aws-certificate-manager.md>), [aws-fargate](<https://devfeed.tech/tags/aws-fargate.md>), [intermediate-200](<https://devfeed.tech/tags/intermediate-200.md>), [rest-api](<https://devfeed.tech/tags/rest-api.md>), [tls](<https://devfeed.tech/tags/tls.md>)

## AI overview

This tutorial shows how to configure Amazon API Gateway to present a third-party or AWS Private CA-issued client certificate for outbound mTLS to an Amazon ECS backend.

## Source excerpt

Enterprises that use Amazon API Gateway often want to bring their own client certificate for backend mutual TLS (mTLS) authentication. With API Gateway, you can now use a third-party or AWS Private CA-issued client certificate for the outbound mTLS handshake. In this post, you build a REST API with an outbound mTLS connection to an Amazon ECS backend.