CLF-C02 Practice Question 78: API Front Door
AWS Certified Cloud Practitioner (CLF-C02) · Test 8 · question 8 of 10
Developers have written their application's business logic as AWS Lambda functions. They need a managed "front door" so that mobile apps can call those functions as a REST API over HTTPS, with AWS handling traffic management, authorization and monitoring of the API calls. Which service should they use?
Show answer and explanation
Answer:
Amazon API Gateway is for creating, publishing, maintaining, monitoring and securing REST, HTTP and WebSocket APIs at any scale. AWS describes it as a "front door" that gives applications access to backend services such as code running on AWS Lambda. It handles accepting and processing API calls, including traffic management, authorization and access control, and monitoring, and it supports authorization with IAM, Lambda authorizers and Amazon Cognito user pools. Together with Lambda, it forms the app-facing part of AWS serverless infrastructure.
Option A, Amazon CloudFront, is a content delivery network that caches and delivers content from edge locations. It does not define API resources and methods or connect them to Lambda functions. Option B, AWS Global Accelerator, gives static IP addresses and routes traffic over the AWS global network to regional endpoints. It is not an API management service. Option C, Amazon Route 53, is a DNS service. It can point a domain name at an API, but it does not receive, authorize or monitor the API calls.
Reference: What is Amazon API Gateway?