AWS API Gateway

  • API stands for application programming interface.
  • We use API to interact with web applications, and applications use API to communicate with each other.
  • The response of API calls, maybe in Json or XML.
  • API gateway is a service that allows us to publish, maintain, monitor and secure API at any scale.
  • API gateway is like a front door for applications to access data, business, logic, or functionality from your backend services. Example applications running on EC2,Lambda.
  • Supported API types include 
    • restful API, which are optimized for stateless, Serverless workloads.
      • Representational state transfer.
      • Optimized for server-less and web applications.
      • Stateless
      • Supports Json
      • JavaScript object notation
      • Annotation language that uses key value pairs.
      • Example
        • {
        • “id”:”1”,
        • “firstname”:”Gaurav”,
        • “lastname”:”Matta”
        • }
    • Web socket APIs are for real time, two-way state, full communication example chat apps.
  • API gateway provides a single endpoint for all client traffic interacting with the backend of your application.
  • Depending on the type of request, API gateway can do transfer the request to any of the services such as Lambda, EC2 , or Dynamo DB.
    • It allows you to connect to application running on the lambda, EC2 , or elastic beanstalk, and Services like Dynamo, DB, and kinesis.
  • Supports multiple endpoints and targets and send each API to a different target.
  • Supports multiple versions
    • Allows you to maintain multiple versions of your API, so you can have different versions for your development, testing and production environments.
  • API gateway is serverless so it is cost-effective and scalable.
  • API gateway integrates with cloud watch, so API gateway logs, API calls, latencies and error rates to cloud watch.
  • Supports Throttling
    • API gateway helps you to manage traffic with throttling so that backend operations can with stand traffic, spikes and denial of service attacks.
  • API gateway provides an endpoint to your application running in AWS.

Comments

Post a Comment

Popular posts from this blog

Effect : Deny vs No Action

No action allows us to provide granular level control over resources operations. For example, if we use effect, deny For all actions in IAM An, then we use effect allow over some actions in IAM then deniable supersede allow. The way to overcome above issue is to use NoAction on all IAM operations And action on Allowed IAM operations. Example { "Version" : "2012-10-17" , "Statement" : [ { "Effect" : "Allow" , "NotAction" : [ "iam:*" , "organizations:*" , "account:*" ], "Resource" : "*" }, { "Effect" : "Allow" , "Action" : [ "iam:CreateServiceLinkedRole" , "iam:DeleteServiceLinkedRole" , "iam:ListRoles" , "organizations:DescribeOrganization" , "account:ListRegions" ,
Read more

AWS Summaries

Database Summary  RDS(OLTP) SQL My SQL Post Gre SQL Oracle Aurora Maria DB Dynamo DB(No SQL) Redshift OLAP Elastic cache Memcached Redis RDS runs on virtual machines We cannot log into this operating systems however Patching of our RDS Operating system and DB is Amazons responsibility. RDS is not server-less. Aurora surverless is seven less which is an exception. Dynamo DB is server-less. There are two types of backups for RDS Automated backups Database snapshots Read replicas Can be multi availability zones. Use to increase performance Must have backups turned on. Can be in different regions. Can be MySQL,PostgreSQL,Maria DB, Oracle, Aurora, SQL Server is not supported. Can be promoted to master, this will break read replica. Multi availability zone Used for DRG only and not performance. You can force a fail over from one availability zone to another by re-booting the RDS instance. Encryption at Rest Is supported for My SQL, Oracle, SQL server, Postgre SQL, Maria DB and Aurora. Encryp
Read more

Infrastructure Setup using Cloud Formation Templates

Services Required to create CICD Code Build Build code and deploy image in jfrog Code Pipeline Has (Continuous Integration Continuous Deployment)CICD flow Cloud Formation To deploy and create infrastructure we use yml files. S3 Store our data packages and yml files which are used by CFT. ECS To deploy our application on fargate servers We can also create our manual EC2 instances from pipeline. Secrets Manager Manages all the secrets. ELB/ALB Elastic/Application Load Balancer To map context paths of different services GitHub Stores our code Jfrog Used to store all the docker images Dockerfile Used to create a customised docker image Scanning for Vulnerabilities free code Sonarcube Checkmarx Twistlock Cloudwatch Used to store logs We create log group for each of instances Lambda Functions Used for serverless technologies. Creating a new Environment Create the YML images of the different resources required in the environment. The CFT templates are stored in S3 or can be uploaded from syst
Read more