An API Gateway serves as the front door for your application, handling every request and routing it to the appropriate backend service. It provides features like request validation, throttling, authorization, and monitoring, allowing you to centralize security and traffic management for all your APIs without having to build controls into each service, without step-by-step instructions.
In this Challenge Cloud Lab, you’ll create and secure a public REST API in AWS by exposing a serverless backend through Amazon API Gateway. Incoming requests must invoke your Lambda function over a regional endpoint, with robust controls to ensure only authorized clients can access it under defined rate and quota limits.
The following shows the high-level architecture diagram of the infrastructure you’ll create in this challenge: