Amazon API Gateway

Amazon API Gateway

What is Amazon API Gateway?

Amazon API Gateway is a service which creates, publishes, maintains, monitors and secures APIs at any scale.

● It helps to create Synchronous microservices with Load Balancers and forms the app-facing part of the AWS serverless infrastructure with AWS Lambda.

● It handles the tasks involved in processing concurrent API calls.

● It combines with Amazon EC2, AWS Lambda or any web application (public or private endpoints) to work as back-end services.

API Gateway creates RESTful APIs that:

● Are HTTP-based.

● Enable stateless and client-server communication.

● Create standard HTTP methods such as GET, POST, PUT, PATCH and DELETE.

API Gateway creates WebSocket APIs that:

● Follow WebSocket protocol and enable stateful, full-duplex communication between client and server.

● Route incoming messages to the destination based on message content.

Endpoint Types for API Gateway:

Edge-optimized endpoint:

● It signifies reduced latency for requests all around the world.

● CloudFront is also used as the public endpoint.

Regional endpoint:

● It signifies reduced latency for requests that originate in the same region. It can also configure the CDN and protect WAF. Private endpoint:

● It securely exposes the REST APIs to other services only within the VPC. API Gateway - Securities:

● Resource-based policies

● IAM Permissions

● Lambda Authorizer (formerly Custom Authorizers)

● Cognito user pools

Features:

● It helps to create stateful (WebSocket) and stateless (HTTP and REST) APIs.

● It integrates with CloudTrail for logging and monitoring API usage and API changes.

● It integrates with CloudWatch metrics to monitor REST API execution and WebSocket API execution.

● It integrates with AWS WAF to protect APIs against common web exploits.

● It integrates with AWS X-Ray for understanding and triaging performance latencies.

Price details:

● You pay for API Caching as it is not eligible for the AWS Free Tier.

● API requests are not charged for authorization and authentication failures.

● Method calls which consist of API keys are not charged if API keys are missing or invalid.

● API Gateway-throttled and plan-throttled requests are not charged if the request rate exceeds the predefined limits.


meet razorops team

LATEST POSTS