Amazon API Gateway

By Shyam Mohan
Amazon API Gateway

What is Amazon API Gateway?

Amazon API Gateway is a service which creates, publishes, maintains, monitors and secures APIs at any scale.

● It helps to create Synchronous microservices with Load Balancers and forms the app-facing part of the AWS serverless infrastructure with AWS Lambda.

● It handles the tasks involved in processing concurrent API calls.

● It combines with Amazon EC2, AWS Lambda or any web application (public or private endpoints) to work as back-end services.

API Gateway creates RESTful APIs that:

● Are HTTP-based.

● Enable stateless and client-server communication.

● Create standard HTTP methods such as GET, POST, PUT, PATCH and DELETE.

API Gateway creates WebSocket APIs that:

● Follow WebSocket protocol and enable stateful, full-duplex communication between client and server.

● Route incoming messages to the destination based on message content.

Endpoint Types for API Gateway:

Edge-optimized endpoint:

● It signifies reduced latency for requests all around the world.

● CloudFront is also used as the public endpoint.

Regional endpoint:

● It signifies reduced latency for requests that originate in the same region. It can also configure the CDN and protect WAF. Private endpoint:

● It securely exposes the REST APIs to other services only within the VPC. API Gateway - Securities:

● Resource-based policies

● IAM Permissions

● Lambda Authorizer (formerly Custom Authorizers)

● Cognito user pools

Features:

● It helps to create stateful (WebSocket) and stateless (HTTP and REST) APIs.

● It integrates with CloudTrail for logging and monitoring API usage and API changes.

● It integrates with CloudWatch metrics to monitor REST API execution and WebSocket API execution.

● It integrates with AWS WAF to protect APIs against common web exploits.

● It integrates with AWS X-Ray for understanding and triaging performance latencies.

Price details:

● You pay for API Caching as it is not eligible for the AWS Free Tier.

● API requests are not charged for authorization and authentication failures.

● Method calls which consist of API keys are not charged if API keys are missing or invalid.

● API Gateway-throttled and plan-throttled requests are not charged if the request rate exceeds the predefined limits.

Enjoyed this article? Share it.


Subscribe to our LinkedIn Newsletter

Stay updated with the latest in Container Native DevOps & Cloud FinOps

Subscribe


Ready to Streamline Your Kubernetes Performance and Cost?

Experience seamless Kubernetes Auto tuning with RazorOps.

Schedule a Free Meeting Now.