From the course: Hands-On Development in AWS

Unlock this course with a free trial

Join today to access over 24,400 courses taught by industry experts.

Using API Gateway best practices

Using API Gateway best practices - Amazon Web Services (AWS) Tutorial

From the course: Hands-On Development in AWS

Start my 1-month free trial Buy for my team

Using API Gateway best practices

“

- Some key points with respect to best practices for API gateway, it is recommended to use a web application firewall. This is another service or feature provided by Amazon Web Services that you can enable for your API gateway. It would actually watch traffic flowing through your API gateway and protect you against known attacks at at the HTTP level. You can enable x-ray tracing. You can go to CloudWatch logs, take a look at those x-ray traces and see what services are interacting with other services within AWS. You can enable logging on your APIs as well. It is recommended to do that. They do support client side SSL certificate validation, so you can do mutual authentication using SSL certificates with API gateway. Of course, that's only recommended if you actually need that level of authentication. If you need to validate the caller is who they say they are, then you could do it with client side authentication and mutual authentication. You can enable detailed CloudWatch metrics. It…

Contents