Amazon API Gateway

Amazon API Gateway is a cloud service for creating, publishing, maintaining, monitoring, and securing APIs that connect applications with backend services. It supports REST, HTTP, and WebSocket APIs, including two-way real-time communication. APIs can connect to AWS Lambda, Step Functions, Elastic Beanstalk, EC2, and public HTTP endpoints; HTTP APIs can also route to certain private services. API Gateway Portals help teams discover, document, and govern REST APIs. The console connects with CloudWatch for call, latency, and error metrics, alarms, and execution logs. Access options include IAM, Lambda authorizers, OIDC, OAuth 2.0, Cognito user pools, JWT, API keys, and mutual TLS. REST APIs can use optional API keys, request throttling, and configurable caching. A free tier is available to new AWS customers for up to 12 months within monthly allowances; usage above those limits is charged at standard rates. Pay-as-you-go has no minimum fees or upfront commitments. WebSocket messages can be up to 128 KB and are metered in 32 KB increments.

Amazon API Gateway combines API creation, access controls, traffic management, and monitoring in a cloud service. Review the free-tier allowances and usage-based billing, along with the listed WebSocket message limit, when assessing fit.

It suits teams building APIs for applications and backend services, especially those working with AWS services. Developers can also use its generated client SDKs for JavaScript, iOS, and Android.

Amazon API Gateway is a managed cloud service for building and securing APIs that connect applications to backend services. It is best suited to teams already building on AWS and needing REST, HTTP, or real-time WebSocket interfaces. Its strongest case is the breadth of AWS integrations and controls; its main trade-off is usage-based billing once free allowances run out.

Overview

API Gateway brings API creation, publishing, maintenance, monitoring, and security into one AWS service. It supports HTTP, REST, and WebSocket protocols, so it can cover both request-response traffic and two-way real-time communication. That range is useful for teams consolidating API work in AWS, but does not by itself make it the right fit for organizations seeking a self-hosted gateway.

Key features

Backends include AWS Lambda, Step Functions, Elastic Beanstalk, EC2, and publicly accessible HTTP endpoints. HTTP APIs can also route to services behind private application or network load balancers and IP-based services registered in AWS Cloud Map. This is a practical advantage for AWS environments spanning managed services and private workloads, though private integrations are specific to HTTP APIs.

Request throttling helps control traffic. REST APIs add configurable response caching, with keys and time-to-live settings, and optional API keys that can carry per-key permissions, throttling, and request quotas. Those key-based controls are useful for managing REST clients, but should not be mistaken for a feature that applies uniformly to every API type.

Security choices include IAM and access policies, Cognito user pools, JWT/OIDC/OAuth 2.0, Lambda authorizers, API keys, and mutual TLS. API Gateway Portals provide managed AWS-native places to discover, document, and govern REST APIs. The console connects with CloudWatch for call, latency, and error metrics, alarms, and execution logs. AWS describes the service as supporting architectures intended to meet SOC, PCI, ISO, FedRAMP, and HIPAA requirements; customers still own security in the cloud, including decisions tied to their data and regulatory obligations.

Client SDK generation covers languages including JavaScript, iOS, and Android. WebSocket messages can be up to 128 KB and are metered in 32 KB increments, while ping and pong control frames are not metered. Real-time workloads should account for message sizing and connection duration when estimating usage.

Pricing

Free Tier

The Free Tier costs nothing and is billed as free usage for up to 12 months for new AWS customers. Monthly allowances are 1M REST API calls, 1M HTTP API calls, 1M WebSocket messages, and 750,000 WebSocket connection minutes. Usage above those allowances is charged at standard rates, so this is a useful way for eligible new customers to start small, not a permanent unlimited plan.

Pay-as-you-go

Pay-as-you-go has custom pricing and no minimum fees or upfront commitments. HTTP and REST APIs are charged by API calls and data transferred out; WebSocket APIs by messages and connection minutes. Private APIs have no data transfer out charge, but additional charges may apply for other AWS services. This model suits variable workloads that benefit from avoiding a fixed commitment, while making traffic and transfer volume important cost considerations.

The pricing model is paid, with a stated starting point of From $1. There is no free trial; the Free Tier is the available no-cost entry for qualifying new AWS customers.

Platforms

API Gateway is a cloud deployment supporting web, API, Android, and iOS contexts. Its generated SDKs for iOS and Android can help teams connect mobile clients to their APIs.

Who it's for

Choose API Gateway when an AWS-based team needs managed API endpoints, AWS backend integrations, traffic controls, and CloudWatch monitoring in one service. It is less compelling for teams whose priority is self-hosting or a fixed, predictable gateway price, since the service is cloud-based and post-allowance costs vary with usage.

Pros and cons

• Pros: REST, HTTP, and WebSocket support covers conventional and real-time APIs in one managed service.
• Pros: AWS backend options and private HTTP integrations suit architectures that mix managed and internal services.
• Pros: Throttling, REST caching, authorization choices, and CloudWatch monitoring provide useful operational controls.
• Cons: Free usage lasts up to 12 months for new customers, and excess monthly usage is charged at standard rates.
• Cons: Usage-based charges for calls, data transfer, messages, and connection minutes require workload-aware cost planning.
• Cons: REST API key permissions and quota plans do not extend across all API types.

Alternatives

Gravitee API Gateway is worth considering when a freemium option with self-hosted and cross-platform support is a priority; its Community Edition is free under Apache 2.0, while Planet is $2,500 a month.

Kong Gateway may suit readers who want a 30-day free trial with no credit card required, no Gateway limits, and 30 days of analytics retention; its Plus plan has custom pricing.

Envoy Gateway is a free, open-source API gateway for self-hosted use.

KrakenD API Gateway is a self-hosted alternative whose free Community Edition offers unlimited requests, APIs, and AI workloads with no license cost.

Spring Integration is a free, self-hosted Apache 2.0 framework intended as a Java/Spring application dependency.

Tyk Gateway offers a free open-source API gateway, with a usage-based Core plan.

Emissary-ingress is a free open-source Kubernetes API gateway for Linux and self-hosted deployments.

NGINX Gateway Fabric is a free, self-hosted Kubernetes project using the NGINX Open Source data plane, with Gateway API support varying by resource.

Browse API Gateway Software, API Developer Portal Software, and API Management Software for more options.

Verdict

Amazon API Gateway is a strong choice for AWS teams that want a managed route from API clients to a varied set of AWS and HTTP backends, with monitoring and security controls close at hand. Its breadth is the reason to choose it; usage-based charges and the finite Free Tier are the reasons to look elsewhere if cost predictability or self-hosting matters more.