Brainscape's Knowledge GenomeTM


Top Flashcards (Certified)
All Flashcards

AWS - Dev Associate > 23. API Gateway **IMPORTANT** > Flashcards

23. API Gateway **IMPORTANT** Flashcards

1
Q

What are the API Gateway endpoint types?

A
  1. Edge-Optimized (default)
  2. Regional
  3. Private
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
2
Q

You made changes to the API Gateway but they’re not showing up – why?

A

You need to make a “deployment” for API Gateway changes to be in effect

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q

When would you use a Stage variable in API Gateway?

A
  1. to configure your HTTP endpoints your stages talk to (dev, test, prod)
  2. to pass configuration parameters to AWS Lambda through mapping templates
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q

Stage variables are passed to which object in AWS Lambda?

A

Stage variables are passed to the “context” object in AWS Lambda

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
5
Q

If you wanted to change the percentage of traffic sent to a stage, what would you use?

A

Canary deployment

Used in blue/green deployments

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
6
Q

What are the API Gateway Integration Types?

A
  1. MOCK
  2. HTTP / AWS (Lambda & AWS Services)
  3. AWS_PROXY (Lambda Proxy)
  4. HTTP_PROXY
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
7
Q

What is the MOCK Integration Type?

A

API Gateway returns a response without sending the request to the backend

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
8
Q

How do you configure the HTTP/AWS Integration Type?

A
  1. you must configure both the integration request and the integration response
  2. setup data mapping using mapping templates for the request and response
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
9
Q

How do you configure the AWS_PROXY Integration Type?

A

no mapping template

incoming request from the client is the input to Lambda

headers, query string parameters are passed as arguments

the function is responsible for the logic of request / response

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
10
Q

How do you configure the HTTP_PROXY Integration Type?

A

no mapping template

the HTTP request is passed to the backend
the HTTP response from the backend is forwarded by API gateway

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
11
Q

What do you use to modify request / responses for AWS & HTTP integration?

A

Mapping Templates

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
12
Q

What is the default cache TTL?

A

300 seconds

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
13
Q

What is the max cache TTL?

A

1 hour (3600 seconds)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
14
Q

What header can clients use to invalidate the cache (with proper IAM authorization)?

A

Cache-Control: max-age=0

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
15
Q

What should you use to make an API available as an offering ($) for your customers?

A

a Usage Plan

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
16
Q

How does a Usage Plan identify API clients and meter access?

A

API Keys

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
17
Q

What is an API Key?

A

an alphanumeric string value to distribute to customers that can be used with a usage plan to control access

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
18
Q

In a Usage Plan, how are throttling limits applied?

A

to the API Keys / the individual

19
Q

What is the overall number of maximum requests?

A

Quota limit

20
Q

What are the steps to configure a usage plan?

A
  1. Create API(s), configure methods to require an API key, and deploy the API(s) to stages
  2. Generate or import API keys to distribute to application developers (your customers) who will be using your API
  3. Create the usage plan with the desired throttle and quota limits
  4. Associate API stages and API keys with the usage plan
21
Q

Callers of the API must supply an assigned API key in which header in requests to the API?

22
Q

What CloudWatch metrics provide information on the efficiency of the cache?

A

CacheHitCount and CacheMissCount

23
Q

What CloudWatch metric provides information on the total number of API requests in a given period?

24
Q

What CloudWatch metric provides information on the time between when API Gateway relays a request to the backend and when it receives a response from the backend?

A

IntegrationLatency

25
What CloudWatch metrics provide information on the time between when API Gateway receives a request from a client and when it returns a response from the client?
Latency Latency will always be higher than IntegrationLatency bc Latency includes IntegrationLatency and other API Gateway overhead
26
What HTTP error message do you receive if requests are being throttled?
HTTP 429 Too Many Requests
27
How do you specify who can access one or more deployed API stages and methods (and also how much and how fast they can access them)?
API Gateway Usage Plans and API keys
28
What is the HTTP Error indicating Gateway Timeout?
HTTP 504 HTTP 504 is 'Gateway timeout' error. Several reasons for this error, to quote a few: The load balancer failed to establish a connection to the target before the connection timeout expired, The load balancer established a connection to the target but the target did not respond before the idle timeout period elapsed.
29
What is the HTTP Error indicating a web ACL is blocking requests to your ALB?
HTTP 403 'Forbidden'
30
Are 4XXError errors client or server side?
4XXError is client-side
31
Are 5XXError errors client or server side?
5XXError is server-side
32
API Gateway throttles requests at what rps across all API?
API Gateway throttles requests at 10,000 rps across all API
33
What must be enabled when you receive API calls from another domain?
CORS
34
The OPTIONS pre-flight request must contain which headers?
1. Access-Control-Allow-Methods 2. Access-Control-Allow-Headers 3. Access-Control-Allow-Origin
35
Can CORS be enabled through the console?
Yes
36
How should you provide IAM permissions to API Gateway?
Create an IAM policy authorization and attach to a User / Role
37
What allows for Cross Account Access to API Gateway?
Resource Policies + IAM Security
38
What are the 3 ways to handle API Gateway user security?
1. IAM (+ resource policy for cross account) 2. Custom Authorizer 3. Cognito User Pool
39
When should you use IAM for API Gateway security?
IAM is great for users / roles already within your AWS account (+ resource policy for cross account)
40
When should you use a Custom Authorizer for API Gateway security?
When you need to handle 3rd party tokens. Also known as Lambda Authorizer. Authorizatoin is done in the Lambda function
41
When should you use Cognito User Pool for API Gateway security?
When you want to manage your own user pool that can be backed by Facebook, Google login, etc Must implement authorization in the backen
42
What type of API is often used in real-time applications such as chat apps, multiplayer games, and financial trading platforms?
WebSocket API - enables stateful application use cases - allows server to push information to the client
43
What can be used to grant API access to one AWS account to users in a different AWS account using Signature Version 4 (SigV4) protocols?
A resource policy

AWS - Dev Associate (22 decks)

Brainscape helps you reach your goals faster, through stronger study habits.
© 2025 Bold Learning Solutions. Terms and Conditions