Amazon API Gateway
What is Amazon API Gateway?
Amazon API Gateway is a service which creates, publishes, maintains, monitors and secures APIs at any scale.
● It helps to create Synchronous microservices with Load Balancers and forms the app-facing part of the AWS serverless infrastructure with AWS Lambda.
● It handles the tasks involved in processing concurrent API calls.
● It combines with Amazon EC2, AWS Lambda or any web application (public or private endpoints) to work as back-end services.
API Gateway creates RESTful APIs that:
● Are HTTP-based.
● Enable stateless and client-server communication.
● Create standard HTTP methods such as GET, POST, PUT, PATCH and DELETE.
API Gateway creates WebSocket APIs that:
● Follow WebSocket protocol and enable stateful, full-duplex communication between client and server.
● Route incoming messages to the destination based on message content.
Endpoint Types for API Gateway:
Edge-optimized endpoint:
● It signifies reduced latency for requests all around the world.
● CloudFront is also used as the public endpoint.
Regional endpoint:
● It signifies reduced latency for requests that originate in the same region. It can also configure the CDN and protect WAF. Private endpoint:
● It securely exposes the REST APIs to other services only within the VPC. API Gateway - Securities:
● Resource-based policies
● IAM Permissions
● Lambda Authorizer (formerly Custom Authorizers)
● Cognito user pools
Features:
● It helps to create stateful (WebSocket) and stateless (HTTP and REST) APIs.
● It integrates with CloudTrail for logging and monitoring API usage and API changes.
● It integrates with CloudWatch metrics to monitor REST API execution and WebSocket API execution.
● It integrates with AWS WAF to protect APIs against common web exploits.
● It integrates with AWS X-Ray for understanding and triaging performance latencies.
Price details:
● You pay for API Caching as it is not eligible for the AWS Free Tier.
● API requests are not charged for authorization and authentication failures.
● Method calls which consist of API keys are not charged if API keys are missing or invalid.
● API Gateway-throttled and plan-throttled requests are not charged if the request rate exceeds the predefined limits.