- Use API Gateway request validation to block malformed payloads early.
- Prefer HTTP APIs over REST APIs for lower latency and cost unless specific REST features are needed.
- Use API Gateway request validation (JSON Schema) to block malformed payloads before invoking backend integrations.
- Prefer HTTP APIs over REST APIs for lower latency and cost unless specific REST-only features (WAF, edge-optimization) are needed.
- Implement JWT or Cognito authorizers at the API gateway level to protect endpoints.
- Map distinct API routes to separate micro-functions rather than a single monolith fat-Lambda.