SVS401: Amazon API Gateway HTTP APIs: Beyond the proxy

Resources for SVS401: Amazon API Gateway HTTP APIs: Beyond the proxy

In this session, you learn about the advanced features for Amazon API Gateway HTTP APIs that make it go beyond a simple proxy service. You learn patterns like direct service integrations to help reduce code and improve reliability and private integration options for infrastructure in a VPC. Learn about security best practices using authorizers and throttling, management techniques like infrastructure as code with OpenAPI, and enhanced monitoring options to get the full story of request/response objects. By attending this session, you learn about the HTTP API advanced features that enable you to build secure, efficient APIs that are easier to manage, faster, and cost less to operate.

Private integrations

Happy Little APIs demonstration video

In this episode, my guest, Ran Ribenzaft, Serverless hero and Epsagon CTO, and I show how to do private integrations with Amazon API Gateway's HTTP APIs. We demonstrate using NLB/ALB and AWS Cloud Map. There are also some dad jokes.

Watch

AWS service integrations video

Using the new HTTP APIs service integrations in AWS SAM

In this session I will walk through creating a service integration on HTTP API. We will cover building it in the console and exporting for use with AWS SAM.

Watch

HTTP API authorizers

Introducing IAM and Lambda authorizers for Amazon API Gateway HTTP APIs

The API Gateway team is continuing work to improve and migrate popular REST API features to HTTP APIs. We are adding two of the most requested features, AWS Identity and Access Management (IAM) authorizers and AWS Lambda authorizers.

Read

Enhanced observability variables for API Gateway

Troubleshooting Amazon API Gateway with enhanced observability variables

The API Gateway team has added new enhanced observability variables to the API Gateway access logs. With these new variables, developers can troubleshoot on a more granular level to quickly isolate and resolve request errors and latency issues.

Read

AWS service integrations blog

Building storage-first serverless applications with HTTP APIs service integrations

Over the last year, I have been talking about “storage first” serverless patterns. With these patterns, data is stored persistently before any business logic is applied. The advantage of this pattern is increased application resiliency. By persisting the data before processing, the original data is still available, if or when errors occur.

Read

JWT authorizers on JTTP APIs

Simple HTTP API with JWT Authorizer in SAM

In this episode I build a SAM template for HTTP API with a non-authenticated route and an authenticated route.

Watch

Introducing mutual TLS authentication for Amazon API Gateway

Simple HTTP API with JWT Authorizer in SAM

Today, AWS is introducing certificate-based mutual Transport Layer Security (TLS) authentication for Amazon API Gateway. This is a new method for client-to-server authentication that can be used with API Gateway’s existing authorization options.

Read

Presented by:

Eric Johnson

Eric Johnson is a Principal Developer Advocate for Serverless Applications at Amazon Web Services and is based in Northern Colorado. Eric is a fanatic about serverless and enjoys helping developers understand how serverless technologies introduces a major paradigm shift in how they approach building and running applications at massive scale with minimal administration overhead. Prior to this, Eric has worked as a developer, solutions architect and AWS Evangelist for an AWS partner company.

Follow on LinkedIn