API Gateway Flashcards

1
Q

What is API Gateway?

A

A solution for creating secure APIs in your cloud environment at any scale

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
2
Q

How do APIs act as a front door?

A

They are a front door for application to access data, business logic, or functionality from back-end services.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q

How many API endpoint requests per second (default)?

A

10,000 request per second

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q

How can you increase the maximum API endpoint requests per second?

A

Via service request through AWS support

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
5
Q

What are API stages?

A

Stages allow you to have multiple published versions of your API

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
6
Q

Examples of API stages?

A

prod, staging, QA

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
7
Q

Each stage has __? which is the endpoint you use to interact with your API?

A

Invoke URL

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
8
Q

What type of domain can you have for your I**e URL?

A

A custom domain e.g. api.exampro.co

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
9
Q

How do you publish your API? What do you need to specfiy?

A

Via Deploy API. You need to specify what STAGE you want to publish your API

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
10
Q

What are resources in relation to APIs?

A

The API URLs e.g. /projects

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
11
Q

What is an extension of resources?

A

You can have child resources e.g. /projects/-id-/edit

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
12
Q

What are examples of Methods on resources?

A

GET, POST, DELETE

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
13
Q

What is CORS?

A

Cross-origin resource sharing (CORS) is a browser security feature that restricts cross-origin HTTP requests that are initiated from scripts running in the browser.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
14
Q

Who enforces CORS?

A

The client

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
15
Q

Where can CORS be enabled?

A

on ALL or individual API endpoints

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
16
Q

What does caching do in relation to API gateway?

A

It improves latency and reduces the amount of calls made to your endpoint

17
Q

What is XSS?

A

Cross-site scripting (also known as XSS) is a web security vulnerability that allows an attacker to compromise the interactions that users have with a vulnerable (but trusted) application.

18
Q

What is Same Origin Policies in relation to API gateway?

A

They prevent XSS attacks

19
Q

What do Same Origin Policies ignore?

A

They ignore tools such as postman or curl

20
Q

How can you enable authorization to your API?

A

Via AWS cognito or a custom lambda