Best Practices for Designing Amazon API Gateway Private ...
Best Practices for Designing Amazon API Gateway Private APIs and Private Integration
January 2021
This paper has been archived
For the latest technical content, refer to:
Notices
Customers are responsible for making their own independent assessment of the information in this document. This document: (a) is for informational purposes only, (b) represents current AWS product offerings and practices, which are subject to change without notice, and (c) does not create any commitments or assurances from AWS and its affiliates, suppliers or licensors. AWS products or services are provided "as is" without warranties, representations, or conditions of any kind, whether express or implied. The responsibilities and liabilities of AWS to its customers are controlled by AWS agreements, and this document is not part of, nor does it modify, any agreement between AWS and its customers.
? 2021 Amazon Web Services, Inc. or its affiliates. All rights reserved.
This paper has been archived
For the latest technical content, refer to the AWS Whitepapers & Guides page:
Contents
Introduction ..........................................................................................................................1 Overview of Amazon API Gateway.....................................................................................1 Rest API...............................................................................................................................2
Private Endpoint Type......................................................................................................2 Private Integration ............................................................................................................5 Sample Architecture Patterns ..........................................................................................5 WebSocket API....................................................................................................................9 Private Integration ............................................................................................................9 Sample Architecture Pattern ............................................................................................9 HTTP API...........................................................................................................................10 Private Integration ..........................................................................................................11
Sample ArchitectureTPhaittserpnsa..p....e...r...h...a...s....b....e...e...n.....a...r..c..h....i.v...e...d.................................11
Security ..............................................................................................................................13
Cost OptimFizoartiotnh.e....l.a...t..e...s..t...t..e...c..h...n...i.c..a...l...c..o...n...t..e..n...t..,...r..e...f.e...r...t..o....t..h...e....A...W.....S..............14 Conclusion .......................W.....h..i..t..e..p...a...p...e...r.s....&.....G...u...i..d..e...s....p...a..g...e...:...................................16 Contributors .........h...t..t.p...s...:./../..a...w....s....a...m.....a..z..o...n......c..o...m..../..w....h...i..t.e...p...a...p...e..r..s..........................16
Further Reading.................................................................................................................17 Document Revisions..........................................................................................................17
Abstract
For many enterprise customers, AWS Direct Connect or a virtual private network (VPN) is often used to build a network connection between an on-premises network and an Amazon Web Services (AWS) virtual private cloud (VPC). This adds additional complexity to a network design, and introduces challenges to Amazon API Gateway private API and private integration setup. This whitepaper introduces best practices for deploying private APIs and private integrations in API Gateway, and discusses security, usability, and architecture. This whitepaper is aimed at developers who use API Gateway, or are considering using it in the future.
This paper has been archived
For the latest technical content, refer to the AWS Whitepapers & Guides page:
Amazon Web Services Integration
Best Practices for Designing Amazon API Gateway Private APIs and Private
Introduction
Many customers use Amazon API Gateway to build RESTful and HTTP APIs. If the use of those APIs is limited to internal clients, customers prefer to use private APIs, because private APIs provide a secure means to invoke APIs via an interface VPC endpoint. API Gateway private integration makes it simple to expose your HTTP/HTTPS resources behind an Amazon VPC, for access by clients outside of the VPC. Additionally, private integration can integrate with private APIs, so the APIs can send requests to a Network Load Balancer (NLB) through a private link. For HTTP APIs, Application Load Balancer (ALB) and AWS Cloud Map are also supported. Private integration forwards external traffic sent to APIs to private resources, without exposing the APIs to the internet.
Based on security requirements, different security measures can be placed at different
security layers. To secure VPC resources such as Elastic Network Interface (ENI),
associate resources are associated with a security group. VPC endpoints are
associated with both the security group and the resource policy. For NLB, Transport
Secure Layer (TLS) listeners are used to secure a listener. For ALB, security groups
and HTTPS listeners are used.
Compared to regionalTahndisedpgea-oppetimrizhead sAPbI eimeplnemaenrtcahtioinv,eprdivate API
implementation and private integrations add additional components, such as interface
VPC endpoFiontrs athndelolaadtebasltantceecrsh.nThicisaclacnolenatdetno ta,ddreitiofenarl tcoomtphleexiAtyWin aSpplication
architectures.
Whitepapers & Guides page:
This whitepaper inhcltutdpess:s/a/mapwlesa.racmhiteacztuornes.ctoohmel/pwunhdietrestpanadpperirvsate APIs, along
with private integration implementation and best practices. It also covers security and
cost optimizations.
Overview of Amazon API Gateway
Amazon API Gateway is a fully managed service that helps you easily create, publish, maintain, monitor, and secure APIs at any scale. It provides three different types of APIs: REST, WebSocket, and HTTP. Depending on your business needs and architectural patterns, you can use one or more of the API types:
1
................
................
In order to avoid copyright disputes, this page is only a partial summary.
To fulfill the demand for quickly locating and searching documents.
It is intelligent file search solution for home and business.
Related download
- selling on amazon guide to xml
- qualys integration with aws security hub
- securing amazon web services with qualys
- aws serverless multi tier architectures with amazon api
- aws managed services com
- amazon api gateway api reference com
- tidal workload automation 6 3 3 documentation overview
- login with amazon
- aws tagging strategies how should i tag my aws resources
- customer google search
Related searches
- financial best practices for nonprofits
- best practices for email communication
- salesforce best practices for sales
- best practices for nonprofit organizations
- best practices for finance departments
- best practices for teachers
- best practices for accountability
- best practices for reporting
- best practices for charitable foundations
- best practices for nonprofit
- best practices for relationship management
- best practices for email campaigns