#apigateway | Amazon API Gateway (1)

The API Gateway is mainly used to built Serverless applications. On top of that, you might want to use an API Gateway as the frontdoor for other backend systems as well.

How to monetize an API on AWS?

Did you develop an API and want to sell access? Here is how I combined Amazon’s API Gateway (REST APIs) and FastSpring, a payment and subscription platform, to monetize our API for malware scanning. Luckily, you can apply the pattern to any REST API. T...

Application Authentication and Authorization on AWS

In this blog post, you will learn to implement authentication and authorization for your own HTTP(S)-based applications on AWS. Most applications offer some functionality only to authenticated clients. A client can be a human or a machine. Humans usuall...

Cognito Under the Hood

Have you ever implemented a user database and authentication layer yourself? There are many things to get right: Hashing and salting passwords, multi-factor authentication, brute force attacks, and many more. That’s why I recommend using a production-re...

Serverless Hybrid Cloud: Accessing an API Gateway via VPN or Direct Connect

Recently, I’ve been coaching a team building a Serverless application. The extraordinary thing about it? We had to create a solution fitting into the hybrid cloud approach of the organization. An essential requirement was that the Serverless application...

Comparing API Gateways on AWS

Of the different API gateways offered by AWS, which option fits your needs? An API Gateway is “a server that acts as an API front-end, receives API requests, enforces throttling and security policies, passes requests to the back-end service, and then pa...

How to enable CORS on API Gateway with Lambda proxy integration?

When building single-page applications (SPA), you will sooner or later stumble upon Cross-Origin Resource Sharing (CORS). In short, a browser does only allow requests to the same same origin (domain, protocol and port), that was used for the initial req...

Review: API Gateway HTTP APIs - Cheaper and Faster REST APIs?

An API gateway acts as an API front-end that receives API requests from clients and forwards them to back-end services. Typically, an API gateway offers the following features: Throttling Billing Authentication and authorization Request validation Requ...

Serverless WebSocket API: API Gateway, Kinesis, Lambda

Nowadays, it is a common approach to use a RESTful API following the synchronous request/response model. But what about asynchronous communication? Or communication that is synchronous but could be modeled asynchronous as well? A WebSocket API based on ...

Customized rate limiting for API Gateway by path parameter, query parameter, and more

API Gateway provides a feature to limit the number of requests a client can make per second (rate) and per day/week/month (quota). Rate limiting is very useful to protect your system from resource starvation caused by a client flooding your system with ...

AWS Velocity Series: Serverless app

The API Gateway provides an HTTPS endpoint that invokes a Lambda function when a request arrives. The diagram was created with Cloudcraft - Visualize your cloud architecture like a pro. As you can see, there is not much infrastructure to set up. To mak...

Reference API Gateway Models in CloudFormation

API Gateway Models are defined using JSON Schema. You can reference a Model inside another Model using the $ref field. If you are familiar with the OpenAPI Specification fka Swagger, you may have seen something like this: { "$ref": "#/definitions/...

Create a serverless RESTful API with the Serverless Framework powered by API Gateway, Lambda, and DynamoDB

This article teaches you how to create a Serverless RESTful API on AWS with the Serverless Framework. DynamoDB is used to store the data. The example’s source code is available on GitHub and can be used to speed up your project. If you are interested i...

API Gateway Custom Authorization with Lambda, DynamoDB and CloudFormation

API Gateway provides an HTTP API endpoint that is fully configurable. You define the HTTP resources (like /user), the HTTP methods on that resources (like POST, GET, DELETE, …) and the integration (e.g. Lambda function) that should be called to process ...

Create a serverless RESTful API with API Gateway, CloudFormation, Lambda, and DynamoDB

This article teaches you how to create a serverless RESTful API on AWS. You will use CloudFormation to define the API Gateway in combination with Lambda to implement the functionality. DynamoDB is used to store the data. The example’s source code is ava...

The Life of a Serverless Microservice on AWS

In this post, I will demonstrate how you can develop, test, deploy and operate a production-ready Serverless Microservice using the AWS ecosystem. The combination of AWS Lambda and Amazon API Gateway allows us to operate a REST endpoint without the need...

Create a serverless RESTful API with API Gateway, Swagger, Lambda, and DynamoDB

This article teaches you how to create a serverless RESTful API on AWS. You will use OpenAPI Specification formerly known as Swagger Specification to define the API and API Gateway in combination with Lambda to implement the API. DynamoDB is used to sto...