Topic 1 Question 420
A company is developing a publicly accessible single-page application. The application makes calls from a client web browser to backend services to provide a user interface to customers. The application depends on a third-party web service exposed as an HTTP API. The web client must provide an API key to the third-party web service by using the HTTP header as part of the HTTP request. The company's API key must not be exposed to the users of the web application.
Which solution will meet these requirements MOST cost-effectively?
Use Amazon API Gateway to create a private REST API. Create an HTTP integration to integrate with the third-party HTTP API. Add the company’s API key to the HTTP headers list of the integration request configuration.
Use Amazon API Gateway to create a private REST API. Create an AWS Lambda proxy integration. Make calls to the third-party HTTP API from the Lambda function. Pass the company's API key as an HTTP request header.
Use Amazon API Gateway to create a REST API. Create an HTTP integration to integrate with the third-party HTTP API. Add the company's API key to the HTTP headers list of the integration request configuration.
Use Amazon API Gateway to create a REST API. Create an AWS Lambda proxy integration. Make calls to the third-party HTTP API from the Lambda function. Pass the company's API key as an HTTP request header.
ユーザの投票
コメント(7)
- 正解だと思う選択肢: C
Im going with C as per this post: https://stackoverflow.com/questions/62443262/aws-api-gateway-to-external-rest-api I am discarding the use of a private rest api because that would imply a VPC endpoint required and that is not cost effective.
👍 3wh1t4k3r2024/09/03 C: While D would work, but it introduces extra Lambda overhead, increasing both complexity and cost compared to directly using API Gateway’s HTTP integration.
👍 3stevesuperdx2024/09/25C. Amazon API Gateway with REST API and HTTP integration is the best solution because it allows the company to securely add the API key to requests sent to the third-party HTTP API without exposing the API key to the client.
👍 3YUICH2024/09/29
シャッフルモード