API Gateway Flashcards

1
Q

What is API Gateway

What are its 6 key features?

A
  • It’s a solution for creating secure APIs in your cloud environment at any scale.
  • Limits (10.000 per second)
  • Stages (dev, prod)
  • Deploy API (Select a stage and deploy)
  • Cors (Enforced by client)
  • Same Origin policies (XXS attacks)
  • Protection (Cognito or Lambda)
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
2
Q

What are 3 common use cases for API gateway?

A

Web App

IoT Device

Mobile App

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q

In API Gateway, Can you have multiple versions of your API?

A

Yes

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q

How you would define a RESTful API with API Gateway

A

Expose HTTPS endpoints

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
5
Q

What are the 5 key features of API Gateway?

A
  • Allows you to track and control any usage of the API. Throttle requests to help prevent attacks.
  • Expose HTTPS endpoints to define a RESTful API.
  • Highly scalable (happens automatically) and cost effective.
  • Send each API endpoint to a different target.
  • Maintain Multiple Versions of your API.
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
6
Q

In API Gateway, Where are APIs deployed to?

A

Stages

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
7
Q

In API Gateway, Anytime you change your API, what action must you take?

A

Deploy It

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
8
Q

What can you select as Integration type with an API Gateway?

5 elements

A
  • Lambda Function
  • HTTP
  • Mock
  • AWS Services
  • VPC Link
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
9
Q

How can you both reduce the number of API calls, and improve latency of API Gateway?

A

Enable caching

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
10
Q

In API Gateway, Where is CORS enforced?

A

The client

CORS is always enforced by the client.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
11
Q

In API Gateway, Same Origin Policies can help prevent this kind of attacks…

A

XSS attacks

  • Ignores Curl and Postman
  • Permits access to data between web-pages
  • Enforced at the web browser level
How well did you know this?
1
Not at all
2
3
4
5
Perfectly