10. Serverless Applications

Application Integration Services

Amazon API Gateway

Explore

Amazon API Gateway

Canary Release Deployment

Custom domain names for REST APIs

Tracing user requests to REST APIs using X-Ray

Amazon API Gateway is an AWS service for creating, publishing, maintaining, monitoring, and securing REST, HTTP, and WebSocket APIs at any scale. API developers can create APIs that access AWS or other web services, as well as data stored in the

AWS Cloud⁠

. As an API Gateway API developer, you can create APIs for use in your own client applications. Or you can make your APIs available to third-party app developers. For more information, see

Who uses API Gateway?⁠

API Gateway creates RESTful APIs that:

Are HTTP-based.

Enable stateless client-server communication.

Implement standard HTTP methods such as GET, POST, PUT, PATCH, and DELETE.

API Gateway supports the following:

Creating, deploying, and managing a

REST⁠

application programming interface (API) to expose backend HTTP endpoints, AWS Lambda functions, or other AWS services.

Creating, deploying, and managing a

WebSocket⁠

API to expose AWS Lambda functions or other AWS services.

Invoking exposed API methods through the frontend HTTP and WebSocket endpoints.

⁠

Features of API Gateway (Must Read)

Amazon API Gateway offers features such as the following:

Support for stateful (

WebSocket⁠

) and stateless (

HTTP⁠

and

REST⁠

) APIs.

Powerful, flexible

authentication⁠

mechanisms, such as AWS Identity and Access Management policies, Lambda authorizer functions, and Amazon Cognito user pools.

⁠

Canary release deployments⁠

for safely rolling out changes.

⁠

CloudTrail⁠

logging and monitoring of API usage and API changes.

CloudWatch access logging and execution logging, including the ability to set alarms. For more information, see

Monitoring REST API execution with Amazon CloudWatch metrics⁠

and

Monitoring WebSocket API execution with CloudWatch metrics⁠

Ability to use AWS CloudFormation templates to enable API creation. For more information, see

Amazon API Gateway Resource Types Reference⁠

and

Amazon API Gateway V2 Resource Types Reference⁠

Support for

custom domain names⁠

Integration with

AWS WAF⁠

for protecting your APIs against common web exploits.

Integration with

AWS X-Ray⁠

for understanding and triaging performance latencies.

API Gateway use cases

Use API Gateway to create REST APIs

An API Gateway REST API is made up of resources and methods. A resource is a logical entity that an app can access through a resource path. A method corresponds to a REST API request that is submitted by the user of your API and the response returned to the user.

Use API Gateway to create HTTP APIs

HTTP APIs enable you to create RESTful APIs with lower latency and lower cost than REST APIs.

You can use HTTP APIs to send requests to AWS Lambda functions or to any publicly routable HTTP endpoint.

Use API Gateway to create WebSocket APIs

In a WebSocket API, the client and the server can both send messages to each other at any time. Backend servers can easily push data to connected users and devices, avoiding the need to implement complex polling mechanisms.

⁠

API Gateway handles all the tasks involved in accepting and processing up to hundreds of thousands of concurrent API calls.

API calls include traffic management, authorization and access control, monitoring, and API version management.

All the APIs created with Amazon API Gateway expose HTTPS endpoints only (does not support unencrypted endpoints).

Can send each API endpoint to a different target.

CloudFront is used as the public endpoint for API Gateway.

Using CloudFront behind the scenes, custom domains, and SNI are supported.

Supports API keys and Usage Plans for user identification, throttling or quota management.

Permissions to invoke a method are granted using IAM roles and policies or API Gateway custom authorizers.

By default API Gateway assigns an internal domain that automatically uses the API Gateway certificates.

When configuring your APIs to run under a custom domain name you can provide your own certificate.

Want to print your doc?
This is not the way.

Try clicking the ⋯ next to your doc name or using a keyboard shortcut (

CtrlP

) instead.