SAA-C03 Question 99
Single answerYou are building a serverless application that requires a REST API to interact with a DynamoDB table. The API must support multiple HTTP methods (e.g., GET, POST, PUT) and require authentication using AWS IAM roles. Which service or configuration should you use to implement this API?
- A
Use Amazon API Gateway to create a REST API and enable AWS IAM authorization.
- B
Use Amazon EC2 to host a REST API and configure AWS IAM authorization in the application code.
- C
Use an Application Load Balancer (ALB) to expose the API and enable AWS IAM authorization.
- D
Use AWS Lambda to create the API and directly integrate AWS IAM authorization into the Lambda function.
Show answer and explanation
Correct answer: A
Explanation
Amazon API Gateway is a managed service designed for creating, publishing, and managing RESTful APIs. It integrates seamlessly with AWS IAM to provide robust authentication and authorization mechanisms. This makes it the best choice for creating a secure, serverless REST API that interacts with services such as DynamoDB. Using other services like EC2 or ALB would require additional effort and would not align with the intended serverless architecture.
- A. Correct.
This is the correct answer. Amazon API Gateway is the ideal service for creating REST APIs. It natively supports AWS IAM authorization, allowing you to secure your API using IAM roles.
- B. Incorrect.
Incorrect. While you could host a REST API on EC2, the solution is not serverless and would require significant manual configuration to manage IAM authorization, defeating the purpose of using a managed service like API Gateway.
- C. Incorrect.
Incorrect. Application Load Balancers do not natively support AWS IAM for API authorization. They are primarily used for load balancing HTTP/HTTPS traffic and do not provide a robust API management solution.
- D. Incorrect.
Incorrect. AWS Lambda is a compute service and does not provide a built-in REST API management or direct IAM integration for API authorization. You would still need a front-end service like API Gateway to expose the API and handle such configurations.