1
Q

What does API Gateway do with proxy resource?

A

Passes the entire request and response between the frontend and the backend

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
2
Q

What is the most popular integration with API Gateway?

A

AWS Lambda

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q

What can API Gateway integrate with

A

Endpoints on EC2
Load Balancers
Any AWS service
External and publicly accessible HTTP endpoints

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q

Are changes in an API Gateway API effective directly?

A

No, the API has to be published to a stage

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
5
Q

What does API Gateway keeps in order to allow easy roll backs?

A

History of deployments

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
6
Q

API Gateway offers configuration parameters at what level?

A

At the API stage level

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
7
Q

Do APIs have environment variables?

A

Stages have stage variables (which is similar to environment variables but for a specific stage)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
8
Q

What can stage variables be used for?

A

Lambda function ARN
HTTP endpoints
Parameters in mapping templates

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
9
Q

Are stage variables passed to AWS Lambda?

A

If the resource method integration type is a Lambda function, then yes stage variables are passed in the โ€œcontextโ€ object

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
10
Q

What are canary deployments?

A

Canary deployments are a pattern for rolling out releases to a subset of users or servers.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
11
Q

What are mapping templates in API Gateway?

A

They are a way to modify requests / responses (Rename parameters, modify body content, add headers, remove information, etc.)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
12
Q

In what language are mapping templates written?

A

Velocity Template Language (VTL)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
13
Q

What is a common way of writing REST API as code?

A

Swagger / Open API

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
14
Q

What are the two supported languages when writing Swagger specification?

A

YAML

JSON

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
15
Q

What can you do if one of your endpoints is receiving lots of traffic and the response is always the same?

A

Use caching

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
16
Q

What is the default TTL in the API Gateway cache?

A

300 seconds (5 minutes)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
17
Q

What is the min TTL in the API Gateway cache?

A

0 seconds

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
18
Q

What is the max TTL in the API Gateway cache?

A

3600 seconds (1 hour)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
19
Q

At which level are caches defined?

A

At the stage level

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
20
Q

How much data can be in an API Gateway API stage cache at any given time? __ to __

A

0.5 GB to 237 GB

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
21
Q

How can clients invalidate the cache manually?

A

By passing the header โ€œCache-Control: max-age=0โ€

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
22
Q

At what level is it possible to enable CloudWatch logging?

A

At the stage level

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
23
Q

Is it possible to override cache settings at the resource level?

A

Yes

24
Q

API Gateway API metrics are by ___ ?

A

stage

25
Q

How to get more metrics from your API?

A

Enabling detailed metrics

26
Q

How to get the full picture tracing of your API + Lamba ?

A

Enabling X-Ray

27
Q

What must be enabled when you receive calls from another domain?

A

CORS

28
Q

What headers does the OPTIONS pre-flight request must contain?

A

Access-Control-Allow-Methods
Access-Control-Allow-Headers
Access-Control-Allow-Origin

29
Q

What can you set if you want to โ€œsellโ€ your APIs to consumers?

A

Usage Plans and API Keys

30
Q

What do API keys allow you to do?

A

Track API usage from a specific consumer

31
Q

What are the three available authorization methods for API Calls?

A

IAM Permissions
Lambda Authorizer
Cognito User Pools

32
Q

What is IAM Permissions authorization good for?

A

For API authorization within your own infrastructure (Users that need to access the API are registered in your AWS account)

33
Q

What does IAM Permissions authorization leverages?

A

Signature Version 4 signing process (Sig v4) where IAM credentials are in headers

34
Q

What was the former name of โ€œLambda Authorizerโ€ ?

A

Custom Authorizers

35
Q

What is Lambda Authorizer authorization method good for?

A

Managing authorization with the use of 3rd party type of authentication, OAuth, SAML

36
Q

What must the Lambda Authorizer return?

A

An IAM policy for the user defining the actions that will be allowed in the backend

37
Q

Can you avoid calling the Lambda Authorizer function multiple times for the same user?

A

Yes, there is an option to cache the result of authentication

38
Q

What is Cognito User Pools authentication good for?

A

Good for authenticating (validing the identity) of the caller

39
Q

What does Cognito User Pools NOT offer us?

A

Authorization

40
Q

What do Cognito users do before calling our API?

A

Authenticate with Cognito to retrieve a token

41
Q

What does API Gateway do when called to a resource method with Cognito enabled?

A

Connects with Cognito to evaluate the token

42
Q

Where must the developer implement authorization when using Cognito User Pools?

A

In the backend

43
Q

What are the three services offered by AWS Cognito

A

Cognito User Pools
Cognito Identity Pools
Cognito Sync

44
Q

What do Cognito User Pools offer?

A

Sign in functionality for app users (username/email + password, Google authentication, Facebook authentication, etc.)
Integrate with API Gateway

45
Q

What does Cognito Identity Pools (Federated Identities) provide?

A

Provide AWS credentials to users so they can access AWS resources directly (CLI, etc.)

46
Q

How does Cognito User Pools integrate as in Cognito Identity Pools?

A

As an identity provider

47
Q

What is Cognito Sync

A

It is deprecated and replaced by AppSync

Synchronize data from device to Cognito

48
Q

What identity verification methods are offered by AWS Cognito User Pools?

A

Verify by email, by phone, MFA, etc.

49
Q

What does Cognito sends back on login/signup?

A

JWT

50
Q

What does JWT stands for?

A

JSON Web Token

51
Q

Where do Federated Identity get AWS credentials from for the user?

A

AWS STS

52
Q

What does (did) AWS Cognito Sync provide?

A

Storing of preferences, configuration, state of app
Cross device synchronization
Offline capability (Synchronization when back online)

53
Q

Where was data stored in AWS Cognito Sync

A

In datasets

54
Q

How many datasets could you have?

A

Up to 20

55
Q

What was the maximum size of a dataset in AWS Cognito Sync?

A

1 MB