API Gateway
When trying to build RESTful and WebSocket APIs, AWS creates a fully managed service that is built around a simple interface. API Gateway can act as the entryway to other AWS services such as data stored on RDS, or compute calls made by the EC2 or Lambda services as just an example. API Gateway supports a number of protocols including HTTP, HTTPS, and WebSocket.
One of the most compelling features about API Gateway is that since AWS is managing all of the underlying infrastructure, you and your development team can concentrate on building the data being served by the API and hence reduce the cost of building and maintain the API.
Security Considerations for API Gateway
With data and authorizations happening in the course of API events, understanding the security features that can and should be implemented when using the API Gateway service will help keep your data and applications fronted by API Gateway more secure.
- Enable Logging - When using API Gateway...