AWS API Gateway
200 Questions
1 Views

AWS API Gateway

Created by
@FastGrowingBaltimore5920

Questions and Answers

What is the purpose of a mapping template?

  • To configure the integration request and response
  • To specify the integration type
  • To transform the request/response body between frontend and backend data formats (correct)
  • To choose the API integration type
  • What is the difference between AWS integration and AWS_PROXY integration?

  • AWS integration requires setting up integration request and response, while AWS_PROXY integration does not (correct)
  • AWS integration exposes AWS service actions, while AWS_PROXY integration exposes Lambda functions
  • AWS integration is used for HTTP endpoints, while AWS_PROXY integration is used for Lambda functions
  • AWS integration is used for mock integrations, while AWS_PROXY integration is used for HTTP integrations
  • What type of integration is used to expose AWS service actions?

  • Mock integration
  • AWS_PROXY integration
  • AWS integration (correct)
  • HTTP integration
  • What type of integration is used to integrate with a Lambda function?

    <p>AWS_PROXY integration</p> Signup and view all the answers

    What is the purpose of the HTTP proxy integration?

    <p>To access the backend HTTP endpoints with a streamlined integration setup</p> Signup and view all the answers

    What is the difference between HTTP integration and HTTP proxy integration?

    <p>HTTP integration requires setting up integration request and response, while HTTP proxy integration does not</p> Signup and view all the answers

    What is the type property value for the Lambda proxy integration?

    <p>AWS_PROXY</p> Signup and view all the answers

    What is the purpose of the integration request and response in AWS integration?

    <p>To set up necessary data mappings from the method request to the integration request, and from the integration response to the method response</p> Signup and view all the answers

    What is a benefit of using API Gateway for caching?

    <p>Reduced latency</p> Signup and view all the answers

    How does API Gateway protect your backend?

    <p>By throttling and monitoring requests</p> Signup and view all the answers

    What is a feature of API Gateway's integration with CloudWatch?

    <p>Logs back-end performance metrics in near real-time</p> Signup and view all the answers

    What is a benefit of using Open API / Swagger in API Gateway?

    <p>Imports existing Swagger / Open API 3.0 definitions</p> Signup and view all the answers

    How does API Gateway meter utilization?

    <p>By metering utilization by third-party developers</p> Signup and view all the answers

    What is a feature of API Gateway's throttling rules?

    <p>Configured at multiple levels including Global and Service Call</p> Signup and view all the answers

    What is a benefit of using API Gateway's data caching?

    <p>Reduced load on back-end services</p> Signup and view all the answers

    How does API Gateway pricing work?

    <p>You pay only when your APIs are in use</p> Signup and view all the answers

    What type of API calls does API Gateway handle?

    <p>Traffic management, authorization and access control, monitoring, and API version management</p> Signup and view all the answers

    How does API Gateway primarily expose its APIs?

    <p>Using HTTPS endpoints only</p> Signup and view all the answers

    Which back-end services can API Gateway communicate with?

    <p>Amazon EC2, AWS Lambda, or any web application</p> Signup and view all the answers

    What feature does API Gateway use for public endpoints?

    <p>CloudFront</p> Signup and view all the answers

    What is the format for the hostname of an API endpoint in API Gateway?

    <p>{api-id}.execute-api.{region}.amazonaws.com</p> Signup and view all the answers

    What is the role of API keys in API Gateway?

    <p>For user identification and quota management</p> Signup and view all the answers

    What allows an API to present a certificate for authentication?

    <p>Each API endpoint can be sent to a different target with an API Gateway certificate</p> Signup and view all the answers

    Which of the following is NOT an API endpoint type supported by API Gateway?

    <p>Global</p> Signup and view all the answers

    Which type of API Gateway endpoint is designed to be optimized for edge locations?

    <p>Edge-Optimized Endpoint</p> Signup and view all the answers

    What is the maximum time to live (TTL) for API Gateway caching?

    <p>3600 seconds</p> Signup and view all the answers

    What is a primary use for stage variables in API Gateway?

    <p>To manage different environments for API deployments</p> Signup and view all the answers

    What HTTP methods are available for API Gateway resources?

    <p>GET, PUT, POST, DELETE</p> Signup and view all the answers

    Which of the following statements is true regarding integrating an API method with a backend?

    <p>Integration responses map payloads from the backend to client responses.</p> Signup and view all the answers

    How can clients immediately invalidate API Gateway cache?

    <p>Using the header: Cache-Control: max-age=0</p> Signup and view all the answers

    What is a canary deployment in the context of API Gateway?

    <p>Allowing a percentage of traffic to be routed to a new version of an API</p> Signup and view all the answers

    Which of the following methods is NOT a part of the API Gateway method structure?

    <p>Backend Response</p> Signup and view all the answers

    Which of the following is NOT a benefit of using a MOCK integration in API Gateway?

    <p>Providing detailed performance metrics for API calls</p> Signup and view all the answers

    What is the primary purpose of a usage plan in API Gateway?

    <p>Enforcing throttling and quota limits on API usage</p> Signup and view all the answers

    How does the 'Same Origin Policy' in web browsers help prevent cross-site scripting attacks?

    <p>By restricting JavaScript from accessing data on web pages with different origins</p> Signup and view all the answers

    Which of these methods is NOT a mechanism for controlling access to an API in API Gateway?

    <p>AWS Lambda Functions for serverless compute</p> Signup and view all the answers

    What is the primary function of API Gateway resource policies?

    <p>Controlling access to specific API endpoints based on user roles</p> Signup and view all the answers

    What is a key benefit of using IAM Identity-Based Policies for API access control?

    <p>They provide a centralized mechanism for managing user permissions across multiple AWS services</p> Signup and view all the answers

    What is the purpose of Cognito User Pools in the context of API access control?

    <p>Providing a managed user directory for user authentication and authorization</p> Signup and view all the answers

    What is a key feature provided by API Gateway that helps manage and control API releases?

    <p>Support for multiple API versions and release stages</p> Signup and view all the answers

    What is the primary purpose of a MOCK integration in API Gateway?

    <p>All of the above</p> Signup and view all the answers

    What is the primary function of API Gateway resource policies?

    <p>To control whether a specified principal can invoke the API</p> Signup and view all the answers

    What is a key benefit of using IAM Identity-Based Policies for API access control?

    <p>Great for user/roles within your AWS account</p> Signup and view all the answers

    What is the purpose of Cognito User Pools in the context of API access control?

    <p>To allow users to sign in to a web or mobile app</p> Signup and view all the answers

    What is the primary purpose of a usage plan in API Gateway?

    <p>To configure throttling and quota limits</p> Signup and view all the answers

    How does the 'Same Origin Policy' in web browsers help prevent cross-site scripting attacks?

    <p>By prohibiting scripts in a first web page to access data in a second web page</p> Signup and view all the answers

    What is a key feature provided by API Gateway that helps manage and control API releases?

    <p>Robust, secure, and scalable access to backend APIs and hosts multiple versions and release stages</p> Signup and view all the answers

    What is a mechanism for controlling access to an API in API Gateway?

    <p>All of the above</p> Signup and view all the answers

    When are stage variables passed to the "context" object?

    <p>During API Gateway method execution</p> Signup and view all the answers

    Which of the following statements about API Gateway caching is NOT true?

    <p>Clients can invalidate the cache using the header <code>Cache-Control: max-age=0</code>, forcing a fresh response from the backend.</p> Signup and view all the answers

    What is the primary purpose of a usage plan in API Gateway?

    <p>To manage and control access to an API through quotas and rate limiting.</p> Signup and view all the answers

    Which of the following best describes the relationship between an API Gateway method and its integration?

    <p>A method represents the client-facing interface, while the integration connects to the backend service.</p> Signup and view all the answers

    What is the primary benefit of using a "MOCK" integration in API Gateway?

    <p>It enables the API to be tested and deployed without requiring a fully functional backend service.</p> Signup and view all the answers

    What is the primary function of API Gateway resource policies?

    <p>To control access to API resources based on IAM roles and policies.</p> Signup and view all the answers

    How does API Gateway's throttling mechanism protect your backend from excessive traffic?

    <p>By limiting the number of requests per second from a single client or across all clients.</p> Signup and view all the answers

    Which of these is NOT a feature provided by API Gateway for managing and controlling API releases?

    <p>Using version control systems to track changes to the API.</p> Signup and view all the answers

    What is the primary purpose of the edge-optimized API endpoint type in Amazon API Gateway?

    <p>To ensure that API traffic is routed through AWS's global network to minimize latency for users around the world.</p> Signup and view all the answers

    Which of the following statements accurately describes how API Gateway handles authorization and access control for API calls?

    <p>API Gateway allows developers to define custom authorizers using Lambda functions, offering flexible and granular control over access to specific API methods.</p> Signup and view all the answers

    In the context of API Gateway, what is the primary function of a usage plan?

    <p>To define the maximum number of API calls allowed for each API key, enabling quota management and throttling.</p> Signup and view all the answers

    How does API Gateway leverage CloudFront for its public endpoints?

    <p>CloudFront provides the HTTPS endpoints for API Gateway, allowing API calls to be securely routed to the appropriate backend services.</p> Signup and view all the answers

    What is the primary purpose of a mapping template in API Gateway?

    <p>To transform the request payload received by an API endpoint before it is sent to the backend service.</p> Signup and view all the answers

    Which of the following methods is NOT a mechanism for controlling access to an API in API Gateway?

    <p>CloudFront distributions</p> Signup and view all the answers

    What is the primary benefit of using API Gateway's canary deployment feature?

    <p>To gradually roll out new API versions to a small subset of users, allowing for testing and monitoring before full deployment.</p> Signup and view all the answers

    Which of the following statements accurately describes the role of API Gateway custom authorizers in access control?

    <p>Custom authorizers allow developers to define custom authorization rules based on user-specific attributes or business logic, providing fine-grained control over access.</p> Signup and view all the answers

    Which of the following features in Amazon API Gateway is specifically designed to prevent distributed denial of service (DDoS) attacks?

    <p>CloudFront Integration</p> Signup and view all the answers

    In the context of API Gateway's throttling rules, what is the highest level at which throttling can be configured?

    <p>Global Level</p> Signup and view all the answers

    Which of the following is NOT a benefit of importing an existing Swagger/Open API 3.0 definition into API Gateway?

    <p>Enhanced API version control</p> Signup and view all the answers

    When using Amazon API Gateway, what is the PRIMARY method for monitoring the utilization of your APIs by third-party developers?

    <p>Utilizing the API Gateway console</p> Signup and view all the answers

    Which of the following statements accurately describes how Amazon API Gateway handles data transfer charges for Private APIs?

    <p>Data transfer charges are incurred only when using AWS PrivateLink.</p> Signup and view all the answers

    Amazon API Gateway offers various integration types. Which type is best suited for integrating with backend services that are NOT part of the AWS ecosystem?

    <p>HTTP Integration</p> Signup and view all the answers

    Which of the following metrics, captured by Amazon API Gateway's logging and monitoring capabilities, is LEAST relevant to assessing the performance of your APIs?

    <p>Cache Hit Ratio</p> Signup and view all the answers

    How does API Gateway handle the 'Same Origin Policy' restriction enforced by web browsers, which prevents direct access to resources from different domains?

    <p>API Gateway leverages CORS (Cross-Origin Resource Sharing) to allow cross-domain access.</p> Signup and view all the answers

    Which of these integrations does NOT require configuring both the integration request and integration response?

    <p>HTTP_PROXY Integration</p> Signup and view all the answers

    When would you use a Lambda custom integration over a Lambda proxy integration?

    <p>When you need to directly access and manipulate the request body before sending it to the Lambda function.</p> Signup and view all the answers

    Which integration type allows for the most flexible and versatile integration setup with a Lambda function?

    <p>AWS_PROXY Integration</p> Signup and view all the answers

    What is the key distinction between HTTP Integration and HTTP_PROXY Integration?

    <p>HTTP Integration allows for greater control over the data sent to the backend HTTP endpoint, while HTTP_PROXY Integration offers a more streamlined approach.</p> Signup and view all the answers

    Which of the following statements about AWS Integration is TRUE?

    <p>AWS Integration requires you to configure both the integration request and integration response, setting up necessary data mappings.</p> Signup and view all the answers

    Which integration type is NOT suitable for exposing an AWS service action?

    <p>AWS_PROXY Integration</p> Signup and view all the answers

    What is a scenario where you would use a MOCK integration in API Gateway?

    <p>When you need to test your API endpoint's functionality before deploying it to a real backend service.</p> Signup and view all the answers

    Which integration type requires the most configuration and control over the data sent between the API Gateway and the backend service?

    <p>HTTP Integration</p> Signup and view all the answers

    What is the primary purpose of API Gateway's usage plans?

    <p>To define specific usage quotas and throttling limits for API calls based on user needs.</p> Signup and view all the answers

    What is the primary function of API Gateway resource policies?

    <p>To control access to specific API resources based on IAM policies and roles.</p> Signup and view all the answers

    Which of the following is NOT a benefit of using IAM Identity-Based Policies for API access control?

    <p>Offers the ability to define custom authorization logic based on specific criteria, beyond standard IAM policies.</p> Signup and view all the answers

    What is the purpose of Cognito User Pools in the context of API access control?

    <p>To provide secure user authentication and authorization for API calls using user pools.</p> Signup and view all the answers

    Which of the following statements about API Gateway caching is NOT true?

    <p>Clients can immediately invalidate API Gateway cache by specifying a unique header parameter in their requests, ensuring they get the latest data.</p> Signup and view all the answers

    When are stage variables passed to the "context" object?

    <p>During the execution of a Lambda function integrated with the API Gateway endpoint.</p> Signup and view all the answers

    Which of these methods is NOT a mechanism for controlling access to an API in API Gateway?

    <p>Implementing API gateway resource policies to control the integration types and settings for each API endpoint.</p> Signup and view all the answers

    What is a key feature provided by API Gateway that helps manage and control API releases?

    <p>API stages, which allow you to deploy and manage multiple versions of your API in parallel.</p> Signup and view all the answers

    Which of the following statements accurately describes the purpose of a MOCK integration in API Gateway?

    <p>To simulate backend responses without actually invoking the backend, enabling testing and collaborative development.</p> Signup and view all the answers

    Which of the following is a benefit of using API Gateway resource policies for controlling access to an API?

    <p>They allow for fine-grained access control based on user roles and permissions, ensuring secure API access.</p> Signup and view all the answers

    How do IAM Identity-Based Policies contribute to secure API access control in API Gateway?

    <p>They provide a mechanism for verifying IAM permissions passed by the calling application, ensuring authorized access.</p> Signup and view all the answers

    What is the primary purpose of Cognito User Pools in the context of API access control?

    <p>To manage user accounts and provide a secure way for users to authenticate with an API.</p> Signup and view all the answers

    Which of the following statements BEST describes the functionality of API Gateway usage plans?

    <p>Usage plans define quotas and throttling limits for API access, preventing unauthorized use and ensuring optimal performance.</p> Signup and view all the answers

    Which of the following accurately describes the 'Same Origin Policy' and its role in web security?

    <p>It's a security mechanism that prevents unauthorized access to sensitive information by restricting access to resources based on their origin.</p> Signup and view all the answers

    Which of the following features BEST demonstrates API Gateway's ability to manage and control API releases?

    <p>API Gateway supports multiple versions and release stages for APIs, enabling controlled deployment and rollback.</p> Signup and view all the answers

    Which of the following is NOT a mechanism for controlling access to an API in API Gateway?

    <p>API Gateway usage plans</p> Signup and view all the answers

    What key characteristic differentiates the Lambda custom integration from other AWS integrations?

    <p>It requires separate configuration for inbound and outbound data.</p> Signup and view all the answers

    Which of the following is true about HTTP proxy integration compared to HTTP integration?

    <p>HTTP proxy integration does not require configuration of the integration request or response.</p> Signup and view all the answers

    Which integration type lets an API method be integrated with AWS service actions without requiring a structured request setup?

    <p>AWS_PROXY Integration</p> Signup and view all the answers

    What happens to requests in a Lambda proxy integration?

    <p>Requests are passed to the backend Lambda function without transformation.</p> Signup and view all the answers

    For which integration type is the integration request and response mandatory to configure?

    <p>AWS integration</p> Signup and view all the answers

    What does the mock integration in API Gateway provide?

    <p>An API method that simulates a backend response.</p> Signup and view all the answers

    Which of the following statements about integration types in API Gateway is accurate?

    <p>API Gateway supports both proxy and non-proxy configurations for different integrations.</p> Signup and view all the answers

    What implication does choosing AWS proxy integration have for method requests?

    <p>It passes the incoming request directly to the backend without additional modifications.</p> Signup and view all the answers

    Which of the following statements accurately describes the relationship between API Gateway and CloudWatch?

    <p>API Gateway integrates with CloudWatch to record API call metrics, latency, and error rates, providing visibility into backend performance.</p> Signup and view all the answers

    How does API Gateway handle the security of its APIs?

    <p>All of the above.</p> Signup and view all the answers

    What is the primary purpose of using API Gateway's Import API feature?

    <p>To import existing Swagger/Open API 3.0 definitions into API Gateway, allowing for API definition as code.</p> Signup and view all the answers

    Which of the following features does API Gateway NOT provide for managing API access?

    <p>Serverless function execution to handle API requests directly.</p> Signup and view all the answers

    What is a key benefit of using API Gateway's caching feature?

    <p>API Gateway caching improves response times and reduces load on backend services by storing frequently accessed API responses.</p> Signup and view all the answers

    How does API Gateway ensure scalability for API traffic?

    <p>API Gateway utilizes a distributed architecture that allows it to handle large volumes of API requests without compromising performance.</p> Signup and view all the answers

    Which of the following is NOT a core pricing component of Amazon API Gateway?

    <p>Fixed monthly subscription fee based on the number of APIs deployed and managed.</p> Signup and view all the answers

    In the context of API Gateway, what is the main function of throttling rules?

    <p>Throttling rules are used to enforce quotas and rate limits for API access, preventing unauthorized access and resource exhaustion.</p> Signup and view all the answers

    What must be done with deployments in API Gateway for users to access the API?

    <p>Deployments need to be associated with a stage.</p> Signup and view all the answers

    What is a primary function of stage variables in API Gateway?

    <p>They act as environment variables in Lambda functions.</p> Signup and view all the answers

    Which of the following best describes the purpose of mapping templates in API Gateway?

    <p>To modify the structure and format of request/response messages.</p> Signup and view all the answers

    What does API Gateway use to apply throttling-related settings?

    <p>Integration and Method Requests/Responses.</p> Signup and view all the answers

    How is the cache capacity specified in API Gateway managed?

    <p>It can range from 0.5GB to 237GB.</p> Signup and view all the answers

    In API Gateway, what is the significance of the 'ANY' HTTP method?

    <p>It serves as a catch-all method for any unspecified HTTP requests.</p> Signup and view all the answers

    What is a canary deployment in the context of API Gateway?

    <p>It lets users test a new version based on a percentage of traffic.</p> Signup and view all the answers

    What does the time to live (TTL) setting represent in API Gateway caching?

    <p>The maximum time a response can be cached before re-fetching.</p> Signup and view all the answers

    What is the primary purpose of an API Gateway deployment?

    <p>To create a snapshot of the APIs resources and methods</p> Signup and view all the answers

    What is the maximum time to live (TTL) for API Gateway caching?

    <p>3600 seconds</p> Signup and view all the answers

    What is the purpose of a stage in API Gateway?

    <p>To identify a lifecycle state of your REST or WebSocket API</p> Signup and view all the answers

    What is the benefit of using stage variables in API Gateway?

    <p>To indicate the corresponding Lambda alias</p> Signup and view all the answers

    What is the purpose of an integration request in API Gateway?

    <p>To map the body of a route request to the formats required by the backend</p> Signup and view all the answers

    What is the purpose of API Gateway caching?

    <p>To reduce the number of calls to the backend and improve the latency of requests to the API</p> Signup and view all the answers

    What is an API Gateway method?

    <p>An HTTP method associated with an API Gateway resource</p> Signup and view all the answers

    What is the purpose of a mapping template in API Gateway?

    <p>To modify request / responses</p> Signup and view all the answers

    Which integration type is used for integrating with an AWS service action, but not for invoking Lambda functions?

    <p>AWS</p> Signup and view all the answers

    What integration type passes the request directly to a Lambda function without any explicit mapping?

    <p>AWS_PROXY</p> Signup and view all the answers

    Which integration type requires you to configure both the integration request and integration response, setting up mappings between the method request and the integration request, and the integration response and the method response?

    <p>AWS</p> Signup and view all the answers

    What is the integration type where API Gateway acts as a placeholder endpoint, providing a response without actually interacting with a backend service?

    <p>MOCK</p> Signup and view all the answers

    Which integration type allows for direct access to a backend HTTP endpoint, passing the client's request and response without any mapping?

    <p>HTTP_PROXY</p> Signup and view all the answers

    What type of integration is best suited for integrating with a Lambda function when you need a flexible and streamlined setup?

    <p>AWS_PROXY</p> Signup and view all the answers

    Which integration type allows for a client to access a backend HTTP endpoint without any explicit mapping between the method request and integration request or integration response and method response?

    <p>HTTP_PROXY</p> Signup and view all the answers

    What is the value of the 'type' property for the Lambda proxy integration?

    <p>AWS_PROXY</p> Signup and view all the answers

    What is the primary function of a MOCK integration in API Gateway?

    <p>To simulate API responses without invoking backend resources</p> Signup and view all the answers

    Which of the following is a benefit of using a MOCK integration in API Gateway for collaborative development?

    <p>It enables teams to test API integrations without relying on backend services.</p> Signup and view all the answers

    How do usage plans in API Gateway control access to API stages and methods?

    <p>By using API keys to identify and authenticate clients</p> Signup and view all the answers

    What is the primary purpose of the 'Same Origin Policy' in web browsers?

    <p>To prevent cross-site scripting attacks</p> Signup and view all the answers

    Which of the following mechanisms can be used to control access to an API in API Gateway?

    <p>All of the above</p> Signup and view all the answers

    What is a key benefit of using IAM Identity-Based Policies for API access control?

    <p>They allow for fine-grained control over API access based on user roles and permissions.</p> Signup and view all the answers

    What is the purpose of Cognito User Pools in the context of API access control?

    <p>To manage user authentication and authorization for API requests</p> Signup and view all the answers

    What is a key feature provided by API Gateway that helps manage and control API releases?

    <p>API Stages</p> Signup and view all the answers

    What type of API endpoints does API Gateway exclusively expose?

    <p>HTTPS endpoints</p> Signup and view all the answers

    Which feature does API Gateway utilize to route users to different backend targets?

    <p>Endpoint configuration</p> Signup and view all the answers

    What is the primary role of CloudFront in relation to API Gateway?

    <p>Public endpoint management</p> Signup and view all the answers

    Which of the following API Gateway endpoint types is best suited for traffic originating from edge locations?

    <p>Edge-optimized</p> Signup and view all the answers

    How does API Gateway manage permissions for invoking a method?

    <p>Using IAM roles and policies</p> Signup and view all the answers

    What is the format of the hostname for an API endpoint in API Gateway?

    <p>{api-id}.execute-api.{region}.amazonaws.com</p> Signup and view all the answers

    Which feature of API Gateway helps with user identification and quota management?

    <p>Usage Plans</p> Signup and view all the answers

    What form of communication does API Gateway primarily utilize to accept and process API calls?

    <p>JSON format</p> Signup and view all the answers

    What is the primary benefit of using AWS Sig-v4 to authorize access to APIs?

    <p>It securely authenticates API requests.</p> Signup and view all the answers

    Which capability allows API Gateway to enhance the performance of back-end services?

    <p>Data caching.</p> Signup and view all the answers

    How does API Gateway integrate with CloudWatch for monitoring?

    <p>By enabling real-time performance metrics tracking.</p> Signup and view all the answers

    What does the API Gateway allow developers to do with Open API / Swagger specifications?

    <p>Create new APIs using external definitions.</p> Signup and view all the answers

    What is the nature of charges associated with the usage of Amazon API Gateway?

    <p>Charges only apply when APIs are used.</p> Signup and view all the answers

    Which of the following is a feature of API Gateway's throttling capabilities?

    <p>Throttling rules can be defined per API key.</p> Signup and view all the answers

    What does the API Gateway dashboard enable developers to do?

    <p>Monitor API call visualizations and performance metrics.</p> Signup and view all the answers

    What is the primary function of the cache in API Gateway?

    <p>To enhance API response times by storing frequent requests.</p> Signup and view all the answers

    What is the primary function of API Gateway?

    <p>To provide a fully managed service for developers to publish, maintain, monitor, and secure APIs</p> Signup and view all the answers

    What type of API calls does API Gateway handle?

    <p>Hundreds of thousands of concurrent API calls</p> Signup and view all the answers

    What is the format of an API endpoint in API Gateway?

    <p>{api-id}.execute-api.{region}.amazonaws.com</p> Signup and view all the answers

    What allows an API to present a certificate for authentication?

    <p>API Gateway custom authorizers</p> Signup and view all the answers

    What is the primary purpose of API Gateway's integration with CloudFront?

    <p>To support custom domains and SNI</p> Signup and view all the answers

    What is the primary function of permissions in API Gateway?

    <p>To grant access to an API</p> Signup and view all the answers

    What is the primary function of Usage Plans in API Gateway?

    <p>To identify and limit API usage</p> Signup and view all the answers

    How does API Gateway primarily expose its APIs?

    <p>Through REST APIs</p> Signup and view all the answers

    What is the primary use of AWS Sig-v4 in Amazon API Gateway?

    <p>To authorize access to APIs</p> Signup and view all the answers

    What is the benefit of using caching in Amazon API Gateway?

    <p>To enhance response times and reduce load on backend services</p> Signup and view all the answers

    What is the purpose of logging and monitoring in Amazon API Gateway?

    <p>To provide a full auditable history of changes to REST APIs</p> Signup and view all the answers

    What is the benefit of using Open API/Swagger in Amazon API Gateway?

    <p>To define REST APIs using API definition as code</p> Signup and view all the answers

    How does Amazon API Gateway pricing work?

    <p>You pay only for the API calls you receive, and the amount of data transferred out</p> Signup and view all the answers

    What is the purpose of throttling rules in Amazon API Gateway?

    <p>To control the number of requests per second for each HTTP method</p> Signup and view all the answers

    What is the benefit of using CloudFront with Amazon API Gateway?

    <p>To reduce latency and protect against denial of service attacks</p> Signup and view all the answers

    What is the purpose of API keys in Amazon API Gateway?

    <p>To authorize access to APIs</p> Signup and view all the answers

    What is the purpose of a stage variable in API Gateway?

    <p>To create a logical reference to a lifecycle state of a REST or WebSocket API</p> Signup and view all the answers

    Which of the following is NOT a valid HTTP method available for API Gateway resources?

    <p>PATCH</p> Signup and view all the answers

    What is the purpose of a mapping template in API Gateway?

    <p>To modify request or response data during integration</p> Signup and view all the answers

    How does API Gateway handle caching for API responses?

    <p>It caches responses for a specific amount of time, based on the TTL setting</p> Signup and view all the answers

    What is the primary purpose of a usage plan in API Gateway?

    <p>To control access to an API based on quotas and rate limits</p> Signup and view all the answers

    Which of the following is a benefit of using a MOCK integration in API Gateway?

    <p>It provides a way to simulate a backend service without actually integrating with it</p> Signup and view all the answers

    What is the purpose of a deployment in API Gateway?

    <p>To create a snapshot of an API's resources and methods</p> Signup and view all the answers

    Which of the following is NOT a feature of API Gateway's integration with Lambda functions?

    <p>Automatic scaling of Lambda functions based on API traffic</p> Signup and view all the answers

    What is the main characteristic of the Lambda proxy integration?

    <p>It directly passes requests from the client to a Lambda function.</p> Signup and view all the answers

    Which integration type does not require setting up both integration request and response?

    <p>AWS_PROXY integration</p> Signup and view all the answers

    In the context of HTTP integration, what must be set up to manage data flow?

    <p>Both the integration request and response</p> Signup and view all the answers

    What kind of integration allows API Gateway to function as an endpoint without using backend services?

    <p>MOCK integration</p> Signup and view all the answers

    Which property value is set for an HTTP proxy integration in an API Gateway?

    <p>HTTP_PROXY</p> Signup and view all the answers

    What does the AWS integration type allow an API to do?

    <p>Expose AWS service actions</p> Signup and view all the answers

    Which characteristic differentiates the Lambda custom integration from the AWS integration?

    <p>It corresponds to the function-invoking action of the Lambda service.</p> Signup and view all the answers

    What is a defining feature of the HTTP proxy integration?

    <p>Direct passing of requests and responses to the client.</p> Signup and view all the answers

    Which of the following is a benefit of using a MOCK integration in API Gateway?

    <p>It allows testing the API integration without invoking the backend service.</p> Signup and view all the answers

    What is the primary function of a usage plan in API Gateway?

    <p>To specify the rate limits and quotas for API access.</p> Signup and view all the answers

    How does the 'Same Origin Policy' in web browsers help prevent cross-site scripting attacks?

    <p>By preventing scripts from one domain from accessing data in another domain without explicit permission.</p> Signup and view all the answers

    What is a key feature provided by API Gateway that helps manage and control API releases?

    <p>The ability to define and manage multiple stages for your APIs.</p> Signup and view all the answers

    Which of the following is a mechanism for controlling access to an API in API Gateway?

    <p>All of the above</p> Signup and view all the answers

    When are stage variables passed to the "context" object?

    <p>When an API request is received.</p> Signup and view all the answers

    Which of the following statements about API Gateway caching is NOT true?

    <p>Caching is automatically enabled for all API methods.</p> Signup and view all the answers

    Which of these is NOT a use case for a MOCK integration?

    <p>Implementing throttling and quota limits.</p> Signup and view all the answers

    Study Notes

    API Gateway Overview

    • Fully managed service for publishing, maintaining, monitoring, and securing APIs at any scale.
    • Works in conjunction with AWS Lambda to form the serverless infrastructure.
    • Supports back-end services like Amazon EC2, AWS Lambda, and web applications.
    • Manages tasks including traffic management, authorization, monitoring, and version control for up to hundreds of thousands of concurrent API calls.

    API Features

    • Provides a REST API that communicates via JSON and exposes only HTTPS endpoints.
    • Supports API keys and usage plans for throttling and quota management.
    • Permissions for API invocation are managed through IAM roles or custom authorizers.

    API Endpoint Types

    • Edge-Optimized: Optimized for global clients, utilizes CloudFront.
    • Regional: Best for clients within a specific AWS region.
    • Private: Accessible only within a virtual private cloud (VPC).

    API Methods

    • Methods correspond to HTTP actions such as GET, PUT, POST, DELETE, and AWS provides an “ANY” method for catch-all scenarios.

    Deployments and Stages

    • Deployments create a snapshot of API resources and methods and are required for public access.
    • Stages represent lifecycle states (e.g., ‘dev’, ‘prod’) and can be configured with variables similar to environment variables.

    Caching

    • Caching improves latency and reduces backend calls, with a default TTL of 300 seconds (maximum 3600 seconds).
    • Cache size ranges from 0.5GB to 237GB and can be encrypted.

    API Throttling

    • Implement limits on a steady-state request rate and burst submissions to manage traffic effectively.
    • Throttling settings can be configured for individual API keys through usage plans.

    Integration Types

    • AWS Integration: Exposes AWS service actions.
    • AWS_PROXY Integration: Streamlined setup for AWS Lambda function invocations.
    • HTTP Integration: Exposes backend HTTP endpoints with configuration required.
    • HTTP_PROXY Integration: Allows requests to be passed through without extra configuration.
    • MOCK Integration: Simulates responses for testing without invoking backend services.

    Usage Plans and API Keys

    • Usage plans control access and usage limits for one or more deployed API stages and methods.
    • API keys are distributed to app developers for access control, and usage plans enforce throttle and quota limits.

    Identity and Access Management

    • Various access control mechanisms include API Gateway resource policies, IAM policies, and Cognito user pools for authentication.
    • Resource policies allow control over who can invoke the API.

    Additional Features

    • API Gateway maintains multiple API versions and stages.
    • SDK Generation available for iOS, Android, and JavaScript.
    • Integrates with CloudFront for reduced latency and DDoS protection.

    Monitoring and Logging

    • Logs API performance metrics such as calls, latency, and error rates to CloudWatch.
    • Integrated with AWS CloudTrail for an auditable history of API changes and calls.

    Open API / Swagger Support

    • Supports importing and exporting Swagger / Open API 3.0 definitions for REST API management.
    • Allows for defining APIs as code and facilitating API modifications.

    Pricing Model

    • Pay-as-you-go model with no minimum fees – charges based on API calls and data transferred.
    • Free tier includes one million API calls per month for up to 12 months.

    API Gateway Overview

    • Fully managed service for publishing, maintaining, monitoring, and securing APIs at any scale.
    • Works in conjunction with AWS Lambda to form the serverless infrastructure.
    • Supports back-end services like Amazon EC2, AWS Lambda, and web applications.
    • Manages tasks including traffic management, authorization, monitoring, and version control for up to hundreds of thousands of concurrent API calls.

    API Features

    • Provides a REST API that communicates via JSON and exposes only HTTPS endpoints.
    • Supports API keys and usage plans for throttling and quota management.
    • Permissions for API invocation are managed through IAM roles or custom authorizers.

    API Endpoint Types

    • Edge-Optimized: Optimized for global clients, utilizes CloudFront.
    • Regional: Best for clients within a specific AWS region.
    • Private: Accessible only within a virtual private cloud (VPC).

    API Methods

    • Methods correspond to HTTP actions such as GET, PUT, POST, DELETE, and AWS provides an “ANY” method for catch-all scenarios.

    Deployments and Stages

    • Deployments create a snapshot of API resources and methods and are required for public access.
    • Stages represent lifecycle states (e.g., ‘dev’, ‘prod’) and can be configured with variables similar to environment variables.

    Caching

    • Caching improves latency and reduces backend calls, with a default TTL of 300 seconds (maximum 3600 seconds).
    • Cache size ranges from 0.5GB to 237GB and can be encrypted.

    API Throttling

    • Implement limits on a steady-state request rate and burst submissions to manage traffic effectively.
    • Throttling settings can be configured for individual API keys through usage plans.

    Integration Types

    • AWS Integration: Exposes AWS service actions.
    • AWS_PROXY Integration: Streamlined setup for AWS Lambda function invocations.
    • HTTP Integration: Exposes backend HTTP endpoints with configuration required.
    • HTTP_PROXY Integration: Allows requests to be passed through without extra configuration.
    • MOCK Integration: Simulates responses for testing without invoking backend services.

    Usage Plans and API Keys

    • Usage plans control access and usage limits for one or more deployed API stages and methods.
    • API keys are distributed to app developers for access control, and usage plans enforce throttle and quota limits.

    Identity and Access Management

    • Various access control mechanisms include API Gateway resource policies, IAM policies, and Cognito user pools for authentication.
    • Resource policies allow control over who can invoke the API.

    Additional Features

    • API Gateway maintains multiple API versions and stages.
    • SDK Generation available for iOS, Android, and JavaScript.
    • Integrates with CloudFront for reduced latency and DDoS protection.

    Monitoring and Logging

    • Logs API performance metrics such as calls, latency, and error rates to CloudWatch.
    • Integrated with AWS CloudTrail for an auditable history of API changes and calls.

    Open API / Swagger Support

    • Supports importing and exporting Swagger / Open API 3.0 definitions for REST API management.
    • Allows for defining APIs as code and facilitating API modifications.

    Pricing Model

    • Pay-as-you-go model with no minimum fees – charges based on API calls and data transferred.
    • Free tier includes one million API calls per month for up to 12 months.

    API Gateway Overview

    • Fully managed service for publishing, maintaining, monitoring, and securing APIs at any scale.
    • Works in conjunction with AWS Lambda to form the serverless infrastructure.
    • Supports back-end services like Amazon EC2, AWS Lambda, and web applications.
    • Manages tasks including traffic management, authorization, monitoring, and version control for up to hundreds of thousands of concurrent API calls.

    API Features

    • Provides a REST API that communicates via JSON and exposes only HTTPS endpoints.
    • Supports API keys and usage plans for throttling and quota management.
    • Permissions for API invocation are managed through IAM roles or custom authorizers.

    API Endpoint Types

    • Edge-Optimized: Optimized for global clients, utilizes CloudFront.
    • Regional: Best for clients within a specific AWS region.
    • Private: Accessible only within a virtual private cloud (VPC).

    API Methods

    • Methods correspond to HTTP actions such as GET, PUT, POST, DELETE, and AWS provides an “ANY” method for catch-all scenarios.

    Deployments and Stages

    • Deployments create a snapshot of API resources and methods and are required for public access.
    • Stages represent lifecycle states (e.g., ‘dev’, ‘prod’) and can be configured with variables similar to environment variables.

    Caching

    • Caching improves latency and reduces backend calls, with a default TTL of 300 seconds (maximum 3600 seconds).
    • Cache size ranges from 0.5GB to 237GB and can be encrypted.

    API Throttling

    • Implement limits on a steady-state request rate and burst submissions to manage traffic effectively.
    • Throttling settings can be configured for individual API keys through usage plans.

    Integration Types

    • AWS Integration: Exposes AWS service actions.
    • AWS_PROXY Integration: Streamlined setup for AWS Lambda function invocations.
    • HTTP Integration: Exposes backend HTTP endpoints with configuration required.
    • HTTP_PROXY Integration: Allows requests to be passed through without extra configuration.
    • MOCK Integration: Simulates responses for testing without invoking backend services.

    Usage Plans and API Keys

    • Usage plans control access and usage limits for one or more deployed API stages and methods.
    • API keys are distributed to app developers for access control, and usage plans enforce throttle and quota limits.

    Identity and Access Management

    • Various access control mechanisms include API Gateway resource policies, IAM policies, and Cognito user pools for authentication.
    • Resource policies allow control over who can invoke the API.

    Additional Features

    • API Gateway maintains multiple API versions and stages.
    • SDK Generation available for iOS, Android, and JavaScript.
    • Integrates with CloudFront for reduced latency and DDoS protection.

    Monitoring and Logging

    • Logs API performance metrics such as calls, latency, and error rates to CloudWatch.
    • Integrated with AWS CloudTrail for an auditable history of API changes and calls.

    Open API / Swagger Support

    • Supports importing and exporting Swagger / Open API 3.0 definitions for REST API management.
    • Allows for defining APIs as code and facilitating API modifications.

    Pricing Model

    • Pay-as-you-go model with no minimum fees – charges based on API calls and data transferred.
    • Free tier includes one million API calls per month for up to 12 months.

    API Gateway Overview

    • Fully managed service for publishing, maintaining, monitoring, and securing APIs at any scale.
    • Works in conjunction with AWS Lambda to form the serverless infrastructure.
    • Supports back-end services like Amazon EC2, AWS Lambda, and web applications.
    • Manages tasks including traffic management, authorization, monitoring, and version control for up to hundreds of thousands of concurrent API calls.

    API Features

    • Provides a REST API that communicates via JSON and exposes only HTTPS endpoints.
    • Supports API keys and usage plans for throttling and quota management.
    • Permissions for API invocation are managed through IAM roles or custom authorizers.

    API Endpoint Types

    • Edge-Optimized: Optimized for global clients, utilizes CloudFront.
    • Regional: Best for clients within a specific AWS region.
    • Private: Accessible only within a virtual private cloud (VPC).

    API Methods

    • Methods correspond to HTTP actions such as GET, PUT, POST, DELETE, and AWS provides an “ANY” method for catch-all scenarios.

    Deployments and Stages

    • Deployments create a snapshot of API resources and methods and are required for public access.
    • Stages represent lifecycle states (e.g., ‘dev’, ‘prod’) and can be configured with variables similar to environment variables.

    Caching

    • Caching improves latency and reduces backend calls, with a default TTL of 300 seconds (maximum 3600 seconds).
    • Cache size ranges from 0.5GB to 237GB and can be encrypted.

    API Throttling

    • Implement limits on a steady-state request rate and burst submissions to manage traffic effectively.
    • Throttling settings can be configured for individual API keys through usage plans.

    Integration Types

    • AWS Integration: Exposes AWS service actions.
    • AWS_PROXY Integration: Streamlined setup for AWS Lambda function invocations.
    • HTTP Integration: Exposes backend HTTP endpoints with configuration required.
    • HTTP_PROXY Integration: Allows requests to be passed through without extra configuration.
    • MOCK Integration: Simulates responses for testing without invoking backend services.

    Usage Plans and API Keys

    • Usage plans control access and usage limits for one or more deployed API stages and methods.
    • API keys are distributed to app developers for access control, and usage plans enforce throttle and quota limits.

    Identity and Access Management

    • Various access control mechanisms include API Gateway resource policies, IAM policies, and Cognito user pools for authentication.
    • Resource policies allow control over who can invoke the API.

    Additional Features

    • API Gateway maintains multiple API versions and stages.
    • SDK Generation available for iOS, Android, and JavaScript.
    • Integrates with CloudFront for reduced latency and DDoS protection.

    Monitoring and Logging

    • Logs API performance metrics such as calls, latency, and error rates to CloudWatch.
    • Integrated with AWS CloudTrail for an auditable history of API changes and calls.

    Open API / Swagger Support

    • Supports importing and exporting Swagger / Open API 3.0 definitions for REST API management.
    • Allows for defining APIs as code and facilitating API modifications.

    Pricing Model

    • Pay-as-you-go model with no minimum fees – charges based on API calls and data transferred.
    • Free tier includes one million API calls per month for up to 12 months.

    API Gateway Overview

    • Fully managed service for publishing, maintaining, monitoring, and securing APIs at any scale.
    • Works in conjunction with AWS Lambda to form the serverless infrastructure.
    • Supports back-end services like Amazon EC2, AWS Lambda, and web applications.
    • Manages tasks including traffic management, authorization, monitoring, and version control for up to hundreds of thousands of concurrent API calls.

    API Features

    • Provides a REST API that communicates via JSON and exposes only HTTPS endpoints.
    • Supports API keys and usage plans for throttling and quota management.
    • Permissions for API invocation are managed through IAM roles or custom authorizers.

    API Endpoint Types

    • Edge-Optimized: Optimized for global clients, utilizes CloudFront.
    • Regional: Best for clients within a specific AWS region.
    • Private: Accessible only within a virtual private cloud (VPC).

    API Methods

    • Methods correspond to HTTP actions such as GET, PUT, POST, DELETE, and AWS provides an “ANY” method for catch-all scenarios.

    Deployments and Stages

    • Deployments create a snapshot of API resources and methods and are required for public access.
    • Stages represent lifecycle states (e.g., ‘dev’, ‘prod’) and can be configured with variables similar to environment variables.

    Caching

    • Caching improves latency and reduces backend calls, with a default TTL of 300 seconds (maximum 3600 seconds).
    • Cache size ranges from 0.5GB to 237GB and can be encrypted.

    API Throttling

    • Implement limits on a steady-state request rate and burst submissions to manage traffic effectively.
    • Throttling settings can be configured for individual API keys through usage plans.

    Integration Types

    • AWS Integration: Exposes AWS service actions.
    • AWS_PROXY Integration: Streamlined setup for AWS Lambda function invocations.
    • HTTP Integration: Exposes backend HTTP endpoints with configuration required.
    • HTTP_PROXY Integration: Allows requests to be passed through without extra configuration.
    • MOCK Integration: Simulates responses for testing without invoking backend services.

    Usage Plans and API Keys

    • Usage plans control access and usage limits for one or more deployed API stages and methods.
    • API keys are distributed to app developers for access control, and usage plans enforce throttle and quota limits.

    Identity and Access Management

    • Various access control mechanisms include API Gateway resource policies, IAM policies, and Cognito user pools for authentication.
    • Resource policies allow control over who can invoke the API.

    Additional Features

    • API Gateway maintains multiple API versions and stages.
    • SDK Generation available for iOS, Android, and JavaScript.
    • Integrates with CloudFront for reduced latency and DDoS protection.

    Monitoring and Logging

    • Logs API performance metrics such as calls, latency, and error rates to CloudWatch.
    • Integrated with AWS CloudTrail for an auditable history of API changes and calls.

    Open API / Swagger Support

    • Supports importing and exporting Swagger / Open API 3.0 definitions for REST API management.
    • Allows for defining APIs as code and facilitating API modifications.

    Pricing Model

    • Pay-as-you-go model with no minimum fees – charges based on API calls and data transferred.
    • Free tier includes one million API calls per month for up to 12 months.

    Studying That Suits You

    Use AI to generate personalized quizzes and flashcards to suit your learning preferences.

    Quiz Team

    Description

    Learn about AWS API Gateway, a fully managed service that enables developers to publish, maintain, monitor, and secure APIs at any scale. It supports various back-end services and handles concurrent API calls.

    Use Quizgecko on...
    Browser
    Browser