AWS Everyday - API Gateway
Transcript
all right this is a pretty exciting service the API Gateway why is it exciting this is basically a proxy and this is something I can get from a hundred different vendors uh service or server or application that acts as a proxy in between my clients and my back end services so if I wanted to normalize apis across a different set of services let's say that I have a monolithic application running an ec2 I have my S3 I have my Lambda and each one of those Services
taught a different API or protocol I can normalize the access of those back-end services with API Gateway generically not just with aws's API Gateway but with any API Gateway a iot client can talk a consistent set of apis to the API Gateway and make a call to a service line on ec2 using those rest apis this same for a mobile device basic concept in application development computer science we have a networking infrastructure storage it's a proxy what makes the AWS service unique and interesting is that
it's geared towards and leverages the entire scale of the AWS infrastructure obviously there's going to be tight integration between the API Gateway and Native AWS services to make the application development and um management easier but you also get the scale of the AWS endpoint so I can put API Gateway caches and extensions and pop locations point of presence whereas wherever AWS has Regional presence or Pops in general so I get the scale of AWS why is that important if I have an iot device in Chicago
I can create an endpoint regionally here in I think the the closest one is probably in Ohio or uh if there's a pop closer and have that end point talk to that LT device there so I have lower latency if I have a worldwide mobile device Network I can use all of the AWS regions uh across the world and have those endpoints and basically have better performing applications the other pieces that is integrated into the AWS control plane so I get all the power of the
Ami and uh identity and and and services and billing and Etc it is a addictive service with that said it is also a dangerous service the Free level gives you a million free calls to the API Gateway that sounds like a lot but I've learned this lesson the hard way we Outsource DNS very similar type of publicly available service you know how many times a spam email server request a DNS entry for your mail server well I found out the hard way literally millions of times
a month even for a relatively inactive mail domain and while that allowance sounds great what will happen what can happen is if this is exposed if your API is exposed globally you can have a malicious actor constantly hitting that API Gateway and running up your AWS bill you can basically get an analysis service to your API Gateway and there's other challenges and there are mitigations to that you can uh put a TLS certificate requirement on the devices and the clients and only accept those connections which
will eliminate this risk all together but you have to be really smart when you think about putting anything on the public internet um I'm excited about this well this is this is a great service I'm glad I reviewed what was special about aws's API Gateway if you have questions DMS are open on Twitter at CTO advisor you want to learn more about the CTO advisor follow us on the web the CTO advisor
