A Solutions Architect wants to make sure that only AWS users or roles with suitable permissions can access a new Amazon API Gateway endpoint. The Solutions
Architect wants an end-to-end view of each request to analyze the latency of the request and create service maps.
How can the Solutions Architect design the API Gateway access control and perform request inspections?
To ensure that only AWS users or roles with suitable permissions can access a new Amazon API Gateway endpoint, using AWS_IAM authorization is appropriate. This method involves setting the authorization of the API Gateway method to AWS_IAM and granting the IAM user or role the execute-api:Invoke permission on the REST API resource. This ensures that the API caller signs requests with AWS Signature when accessing the endpoint. Additionally, AWS X-Ray can be used to trace and analyze user requests to API Gateway, providing the end-to-end view of each request and helping to analyze latency and create service maps. This method secures the access and provides detailed inspection of requests.
A. Access control using Role, and request inspection with X-Ray.
A https://aws.amazon.com/premiumsupport/knowledge-center/iam-authentication-api-gateway/
Answer is A
it's A
I'll go with A
A is correct.
End-to-end request already hints towards the usage of AWS X-ray. Automatically filtering out option B and D. Further the authorisation via role rather than parsing secrets through AWS clients - so A
A is correct - https://docs.aws.amazon.com/apigateway/latest/developerguide/apigateway-resource-policies-examples.html https://docs.aws.amazon.com/apigateway/latest/developerguide/apigateway-using-xray-maps.html
Correct is A. AWS Signature + X-Ray
A is the correct answer. Role +X-ray for better analysis
I'll go with A
https://aws.amazon.com/premiumsupport/knowledge-center/iam-authentication-api-gateway/
going with A
A is the answer, XRay is needed here.
https://aws.amazon.com/premiumsupport/knowledge-center/iam-authentication-api-gateway/
A is right answer
A. For the API Gateway method, set the authorization to AWS_IAM. Then, give the IAM user or role execute-api:Invoke permission on the REST API resource. Enable the API caller to sign requests with AWS Signature when accessing the endpoint. Use AWS X-Ray to trace and analyze user requests to API Gateway.
A. Access control using Role, and request inspection with X-Ray.