AWS API Gateway

Module 1: AWS API Gateway Overview

• REST API vs HTTP API vs WebSocket API: choosing
• API Gateway architecture and request lifecycle
• Integration types: Lambda, HTTP, AWS service, Mock
• Stage variables and deployment stages
• API Gateway console and SAM/CloudFormation
• Pricing model: calls, data transfer, caching

Module 2: REST API Design

• Resource hierarchy and method configuration
• Path parameters and query string parameters
• Request and response models: JSON Schema
• Method request: authentication and validation
• Integration request: mapping templates (VTL)
• Method response and integration response

Module 3: Lambda Integration

• Lambda proxy integration: event object structure
• Lambda non-proxy: custom mapping templates
• Lambda authoriser: token and request types
• Handling Lambda errors as HTTP responses
• Lambda concurrency and throttling impact
• Cold start mitigation strategies

Module 4: Security

• Cognito User Pools authoriser
• Lambda authoriser for custom authentication
• IAM authorisation: SigV4 signing
• API keys and usage plans for throttling
• Resource policies for cross-account access
• WAF integration for API protection

Module 5: HTTP API vs REST API

• HTTP API advantages: performance and cost
• JWT authoriser for HTTP API
• Route and integration configuration in HTTP API
• VPC links for private backend connectivity
• Lambda functions in HTTP API
• Migration from REST to HTTP API

Module 6: WebSocket API

• Connection management: connect, disconnect, message
• Route selection expression
• Lambda integration for WebSocket routes
• DynamoDB integration for connection registry
• Broadcasting messages to multiple connections
• Use cases: chat, real-time dashboards, gaming

Module 7: Advanced Features

• API caching: cache key and TTL configuration
• Usage plans and throttling limits
• Request validation: body, headers, params
• Gateway responses: custom error formats
• Private API: VPC endpoint integration
• Custom domain names and ACM certificates

Module 8: DevOps & Monitoring

• AWS SAM: serverless API definition
• CloudFormation API Gateway resources
• Terraform aws_api_gateway_rest_api
• CloudWatch metrics: latency, count, 4xx, 5xx
• X-Ray tracing for API performance
• CI/CD with CodePipeline and API Gateway stage promotion

Our API management instructors are certified specialists in WSO2, Kong, Apigee, Azure API Management, and AWS API Gateway with deep experience designing API programmes for enterprise organisations. They cover API governance, security policies, developer portals, and rate limiting from an architectural perspective — not just a configuration one.