API Gateway

Overview

• For REST API, Web Socket
• Has versioning
• Support different environments
• Security (Authentication and Authorisation)
• Swagger, Open API support
• Transform, validate requests and response
• Generate SDK and API specification
• Cache API responses

Security

• User authentication
  • IAM roles
  • Cognito
  • Custom Authoriser (your own logic)
• Custom Domain Name HTTPS (Hypertext transfer protocol secure) with AWS Certificate Manager (ACM)
  • if use edge-optimized endpoint then certificate must be in us-east-1
  • if use regional endpoint then certificate must be within the AWS region
  • Must setup a CNAME or A-alias record in Route 53