Get Your CertSAP-C02PlayCompete
‹ All SAP-C02 questions

SAP-C02 Practice Question 95: HTTP API JWT Low Cost

AWS Certified Solutions Architect – Professional (SAP-C02) · Test 10 · question 5 of 10

Design for New Solutionsmedium

A company is building a public API backed by AWS Lambda functions for a mobile app. Users sign in with an Amazon Cognito user pool, and the API must validate the resulting JSON Web Tokens and allow cross-origin requests from the company's web site. The API does not need API keys, per-client rate limiting, request validation, AWS WAF integration, response caching or private endpoints. The company wants the lowest cost and the least configuration.

Which solution meets these requirements?

Select one answer
Show answer and explanation

Answer:

  • B. Create an HTTP API with a JWT authorizer that uses the Cognito user pool, and enable CORS

AWS explains that *"REST APIs support more features than HTTP APIs, while HTTP APIs are designed with minimal features so that they can be offered at a lower price."* It advises to *"choose REST APIs if you need features such as API keys, per-client throttling, request validation, AWS WAF integration, or private API endpoints,"* and to *"choose HTTP APIs if you don't need the features included with REST APIs."* HTTP APIs support JWT authorizers (and Amazon Cognito through a JWT authorizer), CORS configuration and Lambda integrations, so an HTTP API is the cheaper fit (option B).

- A is wrong because usage plans and API keys are REST API features that the company does not need, and they cost more. - C is wrong because a private REST API is only reachable from inside a VPC, but this is a public API for a mobile app. - D is wrong because caching and AWS WAF are REST API features that the company explicitly does not need, and they add cost.

Reference: Choose between REST APIs and HTTP APIs

Practice Test 10 ›

Study guides for SAP-C02

Which AWS certification should you get? 2026 roadmapWhich AWS certification to get first, by role and experience, with each exam's status in October 2026, what is changing, and prices in USD and INR.
SAP-C02 vs SAP-C03, the Solutions Architect Professional updateWhat changes when AWS replaces SAP-C02 with SAP-C03, the key dates, who should still sit SAP-C02, and how to study through the switch without wasted work.
AWS disaster recovery strategies, RTO and RPOBackup and restore, pilot light, warm standby and active/active on AWS, how RTO and RPO pick between them, and the services each strategy uses.
IAM users, roles and policies on AWSHow IAM users, roles, identity-based and resource-based policies, cross-account access, SCPs and permissions boundaries fit together for AWS exams.
SQS vs SNS vs EventBridge on AWSWhen to use an SQS queue, an SNS topic or an EventBridge bus, plus fan-out, FIFO ordering, visibility timeouts and dead-letter queues for AWS exams.
VPC endpoints vs NAT gateways on AWSWhen to use gateway endpoints, interface endpoints (PrivateLink) or a NAT gateway for private subnets, and the cost and security trade-offs exams test.