AW

Amazon API Gateway

REST and HTTP API design, authorizers, and validation

Details

Language / Topic
awsAmazon Web Services
Category
Infrastructure

Rules

balanced
- Use API Gateway request validation to block malformed payloads early.
- Prefer HTTP APIs over REST APIs for lower latency and cost unless specific REST features are needed.
- Use API Gateway request validation (JSON Schema) to block malformed payloads before invoking backend integrations.
- Prefer HTTP APIs over REST APIs for lower latency and cost unless specific REST-only features (WAF, edge-optimization) are needed.
- Implement JWT or Cognito authorizers at the API gateway level to protect endpoints.
- Map distinct API routes to separate micro-functions rather than a single monolith fat-Lambda.