Amazon API Gateway
Amazon API Gateway is a fully managed service that makes it easy to create, publish, maintain, monitor, and secure APIs at any scale. It acts as the front door for applications to access backend services, supporting REST APIs, HTTP APIs, and WebSocket APIs with built-in traffic management, authorization, monitoring, and API version management. API Gateway integrates natively with AWS Lambda, CloudWatch, CloudFront, IAM, and Cognito, and (as of December 2025) can expose REST APIs as MCP-compatible tools for Amazon Bedrock AgentCore Gateway for agent-driven API consumption.
4 APIs
19 Features
API GatewayCloudRESTHTTPWebSocketServerlessMCPAgentCoreDeveloper Portal
REST API Management
Create, deploy, and manage REST APIs with full lifecycle control including stages, deployments, and versioning.
HTTP API Support
Build lightweight HTTP APIs optimized for serverless workloads at up to 71% lower cost than REST APIs.
WebSocket APIs
Enable real-time bidirectional communication for chat platforms, streaming dashboards, and live applications.
Traffic Management
Handle hundreds of thousands of concurrent API calls with built-in throttling and request validation.
Authorization and Security
Supports IAM policies, Lambda authorizers, Amazon Cognito user pools, and OAuth2/OIDC for API access control.
Monitoring and Logging
Integration with CloudWatch metrics, access logging, and CloudTrail for full API observability.
Custom Domain Names
Map APIs to branded custom domains with TLS certificates managed through AWS Certificate Manager.
Canary Releases
Safely roll out API changes using canary deployment stages with configurable traffic splitting.
AWS WAF Integration
Protect APIs against common web exploits and DDoS attacks using AWS Web Application Firewall.
SDK Generation
Automatically generate client SDKs for deployed APIs in multiple programming languages.
API Caching
Reduce backend load and improve response times with configurable response caching at the stage level.
CloudFront Edge Distribution
Leverage Amazon CloudFront edge locations for global low-latency API distribution.
Bedrock AgentCore Gateway MCP Target
Expose REST API stages as Model Context Protocol (MCP) tools for AI agents via Bedrock AgentCore Gateway. AgentCore translates incoming MCP requests into HTTP requests, supports tools/list and tools/call methods, and accepts API_KEY, NO_AUTH, or GATEWAY_IAM_ROLE outbound auth. Launched December 2, 2025.
Developer Portals
Native API Gateway Portals (launched November 19, 2025) let you publish PortalProducts containing REST APIs and per-endpoint documentation. Portals can be shared across AWS accounts and access-controlled via Cognito user pools.
REST API Response Streaming
REST APIs can progressively stream response payloads to clients as they become available (launched November 19, 2025), enabling long-running and incremental response patterns.
Private Integration with Application Load Balancer
REST APIs support private integrations with Application Load Balancers (launched November 21, 2025), expanding private integration options beyond NLB and AWS Cloud Map.
SIGv4a Authentication for REST APIs
REST APIs now support AWS Signature Version 4a (launched August 19, 2025), enabling multi-Region signing for cross-Region API invocations.
Enhanced TLS Security Policies
Configurable TLS security policies for REST APIs and custom domain names (launched November 19, 2025) allow tighter control over accepted protocols and ciphers.
Dual-Stack IPv4/IPv6 Endpoints
REST, HTTP, and WebSocket APIs and custom domain names support dual-stack endpoints (launched March 28, 2025).
Serverless API Backend
Build fully serverless APIs with API Gateway as the front door and AWS Lambda as the backend compute layer.
Microservices Gateway
Consolidate access to multiple microservices behind a single API endpoint with routing and load balancing.
Real-Time Applications
Enable chat apps, collaborative tools, and live dashboards using WebSocket APIs for persistent bidirectional connections.
Mobile and Web Application APIs
Create secure, scalable REST and HTTP APIs for mobile and web front-ends with Cognito authentication.
Legacy API Modernization
Expose existing on-premises or EC2-hosted services as modern REST APIs without rewriting backend logic.
Third-Party API Integration
Aggregate and normalize third-party APIs behind a consistent API surface with transformation and mapping.
MCP Tool Server for AI Agents
Expose REST APIs as MCP-compatible tool catalogs via Bedrock AgentCore Gateway so AI agents can list and invoke operations without bespoke client code.
Developer Portal for Partner APIs
Use native API Gateway Portals to publish partner-facing REST APIs with branded documentation, Cognito-gated access, and self-service key issuance.
aid: aws-api-gateway
name: Amazon API Gateway
description: >-
Amazon API Gateway is a fully managed service that makes it easy to create, publish, maintain, monitor, and secure
APIs at any scale. It acts as the front door for applications to access backend services, supporting REST APIs, HTTP
APIs, and WebSocket APIs with built-in traffic management, authorization, monitoring, and API version management. API
Gateway integrates natively with AWS Lambda, CloudWatch, CloudFront, IAM, and Cognito, and (as of December 2025) can
expose REST APIs as MCP-compatible tools for Amazon Bedrock AgentCore Gateway for agent-driven API consumption.
type: Index
image: https://kinlane-productions.s3.amazonaws.com/apis-json/apis-json-logo.jpg
tags:
- API Gateway
- AWS
- Cloud
- REST
- HTTP
- WebSocket
- Serverless
- MCP
- AgentCore
- Developer Portal
url: https://raw.githubusercontent.com/api-evangelist/aws-api-gateway/refs/heads/main/apis.yml
created: '2026-03-27'
modified: '2026-05-29'
specificationVersion: '0.19'
apis:
- aid: aws-api-gateway:aws-api-gateway-v1
name: Amazon API Gateway V1 (REST)
description: >-
The API Gateway V1 control plane API is used to create, deploy, and manage REST APIs in Amazon API Gateway. It
exposes resources for RestApis, Resources, Methods, Stages, Deployments, Authorizers, API keys, usage plans, and
related configuration.
image: https://kinlane-productions.s3.amazonaws.com/apis-json/apis-json-logo.jpg
humanURL: https://docs.aws.amazon.com/apigateway/latest/developerguide/welcome.html
baseURL: https://apigateway.{region}.amazonaws.com
tags:
- API Gateway
- AWS
- REST
properties:
- type: Documentation
url: https://docs.aws.amazon.com/apigateway/latest/developerguide/
- type: APIReference
url: https://docs.aws.amazon.com/apigateway/latest/api/Welcome.html
- type: GettingStarted
url: https://docs.aws.amazon.com/apigateway/latest/developerguide/getting-started.html
- type: Authentication
url: https://docs.aws.amazon.com/apigateway/latest/developerguide/permissions.html
- type: Documentation
url: https://docs.aws.amazon.com/apigateway/latest/developerguide/apigateway-portals.html
title: API Gateway Portals (Nov 2025)
- type: Documentation
url: https://docs.aws.amazon.com/apigateway/latest/developerguide/mcp-server.html
title: REST API as Bedrock AgentCore Gateway MCP Target (Dec 2025)
- type: Documentation
url: https://docs.aws.amazon.com/apigateway/latest/developerguide/response-transfer-mode.html
title: REST API Response Streaming (Nov 2025)
- type: Documentation
url: https://docs.aws.amazon.com/apigateway/latest/developerguide/private-integration.html
title: Private Integration with Application Load Balancer (Nov 2025)
- type: OpenAPI
url: openapi/aws-api-gateway-v1-openapi.yml
- url: graphql/aws-api-gateway-graphql.md
type: GraphQL
- aid: aws-api-gateway:aws-api-gateway-v2
name: Amazon API Gateway V2 (HTTP and WebSocket)
description: >-
The API Gateway V2 control plane API is used to create, deploy, and manage HTTP APIs and WebSocket APIs in Amazon
API Gateway. It provides resources for Apis, Routes, Integrations, Stages, Deployments, and Authorizers for the
newer HTTP and WebSocket API types.
image: https://kinlane-productions.s3.amazonaws.com/apis-json/apis-json-logo.jpg
humanURL: https://docs.aws.amazon.com/apigateway/latest/developerguide/http-api.html
baseURL: https://apigateway.{region}.amazonaws.com
tags:
- API Gateway
- AWS
- HTTP
- WebSocket
properties:
- type: Documentation
url: https://docs.aws.amazon.com/apigateway/latest/developerguide/http-api.html
- type: APIReference
url: https://docs.aws.amazon.com/apigatewayv2/latest/api-reference/Welcome.html
- type: GettingStarted
url: https://docs.aws.amazon.com/apigateway/latest/developerguide/http-api-develop.html
- type: Documentation
url: https://docs.aws.amazon.com/apigateway/latest/developerguide/apigateway-websocket-api.html
title: WebSocket API Guide
- type: OpenAPI
url: openapi/aws-api-gateway-v2-openapi.yml
- type: AsyncAPI
url: asyncapi/aws-api-gateway-asyncapi.yml
title: WebSocket API Platform Protocol (AsyncAPI 2.6)
- aid: aws-api-gateway:aws-api-gateway-management
name: Amazon API Gateway Management API
description: >-
The API Gateway Management API allows backend services to send messages to connected clients of a deployed
WebSocket API and to disconnect clients. Requests are made against the deployed stage's callback URL.
image: https://kinlane-productions.s3.amazonaws.com/apis-json/apis-json-logo.jpg
humanURL: https://docs.aws.amazon.com/apigatewaymanagementapi/latest/reference/Welcome.html
baseURL: https://{api-id}.execute-api.{region}.amazonaws.com/{stage}
tags:
- API Gateway
- AWS
- Callback
- WebSocket
properties:
- type: Documentation
url: >-
https://docs.aws.amazon.com/apigateway/latest/developerguide/apigateway-how-to-call-websocket-api-connections.html
- type: APIReference
url: https://docs.aws.amazon.com/apigatewaymanagementapi/latest/reference/Welcome.html
- type: OpenAPI
url: openapi/aws-api-gateway-management-openapi.yml
- aid: aws-api-gateway:aws-api-gateway-portals
name: Amazon API Gateway Portals
description: >-
The API Gateway Portals control plane (introduced November 19, 2025) lets you create branded developer portals
that catalog REST APIs. A portal contains PortalProducts (logical groupings of REST APIs) and Product REST
Endpoint Pages that publish path/method/stage-level documentation. Portals are Region-scoped, shareable across AWS
accounts, and access-controlled via Amazon Cognito user pools.
image: https://kinlane-productions.s3.amazonaws.com/apis-json/apis-json-logo.jpg
humanURL: https://docs.aws.amazon.com/apigateway/latest/developerguide/apigateway-portals.html
baseURL: https://apigateway.{region}.amazonaws.com
tags:
- API Gateway
- AWS
- Developer Portal
- REST
properties:
- type: Documentation
url: https://docs.aws.amazon.com/apigateway/latest/developerguide/apigateway-portals.html
- type: APIReference
url: https://docs.aws.amazon.com/apigateway/latest/api/Welcome.html
- type: RateLimits
url: https://docs.aws.amazon.com/apigateway/latest/developerguide/limits.html
common:
- type: PostmanWorkspace
url: https://www.postman.com/kinlaneapi/amazon-api-gateway/overview
- type: ArazzoWorkflows
url: arazzo/
workflows:
- url: arazzo/aws-api-gateway-add-method-and-redeploy-workflow.yml
name: AWS API Gateway Add a Method and Redeploy
summary: Verify a REST API exists, attach a method to one of its resources, and publish a fresh deployment.
- url: arazzo/aws-api-gateway-audit-http-api-workflow.yml
name: AWS API Gateway Audit an HTTP API Surface
summary: Confirm an HTTP API and enumerate its routes, integrations, and stages in a single read-only pass.
- url: arazzo/aws-api-gateway-build-http-api-workflow.yml
name: AWS API Gateway Build an HTTP API
summary: Create an HTTP API, attach a backend integration, wire a route to it, and publish a stage.
- url: arazzo/aws-api-gateway-build-websocket-api-workflow.yml
name: AWS API Gateway Build a WebSocket API
summary: Create a WebSocket API, add an integration, and wire the $connect route to it.
- url: arazzo/aws-api-gateway-create-api-key-and-usage-plan-workflow.yml
name: AWS API Gateway Create an API Key and Usage Plan
summary: Create an API key, create a throttled and quota-limited usage plan, and confirm the plan was registered.
- url: arazzo/aws-api-gateway-decommission-http-api-workflow.yml
name: AWS API Gateway Decommission an HTTP API
summary: Confirm an HTTP API, check for published stages, and delete the API when it is safe to remove.
- url: arazzo/aws-api-gateway-deploy-http-api-stage-workflow.yml
name: AWS API Gateway Deploy an HTTP API to a New Stage
summary: Confirm an HTTP API, create a deployment, and publish it to a new stage bound to that deployment.
- url: arazzo/aws-api-gateway-inspect-rest-api-method-workflow.yml
name: AWS API Gateway Inspect a REST API Method
summary: Confirm a REST API, list its resources, and read the method configuration for a chosen resource and verb.
- url: arazzo/aws-api-gateway-metered-rest-api-workflow.yml
name: AWS API Gateway Provision a Metered REST API
summary: Create a REST API with a key-protected method and branch into usage-plan setup when an API key is required.
- url: arazzo/aws-api-gateway-provision-rest-api-workflow.yml
name: AWS API Gateway Provision and Deploy a REST API
summary: Create a REST API, configure a method on its root resource, deploy it, and confirm the stage.
- url: arazzo/aws-api-gateway-redeploy-rest-api-stage-workflow.yml
name: AWS API Gateway Redeploy a REST API Stage
summary: Confirm a REST API, review its existing deployments, and publish a fresh deployment to a stage.
- url: arazzo/aws-api-gateway-secure-http-api-authorizer-workflow.yml
name: AWS API Gateway Secure an HTTP API with an Authorizer
summary: Create an HTTP API, attach an authorizer, and add a route that uses it.
- type: Website
url: https://aws.amazon.com/api-gateway/
- type: Documentation
url: https://docs.aws.amazon.com/apigateway/
- type: GettingStarted
url: https://docs.aws.amazon.com/apigateway/latest/developerguide/getting-started.html
- type: Pricing
url: https://aws.amazon.com/api-gateway/pricing/
- type: RateLimits
url: https://docs.aws.amazon.com/apigateway/latest/developerguide/limits.html
- type: SDK
url: https://aws.amazon.com/tools/
title: AWS SDKs
- type: CLI
url: https://docs.aws.amazon.com/cli/latest/reference/apigateway/
- type: ChangeLog
url: https://docs.aws.amazon.com/apigateway/latest/developerguide/history.html
- type: StatusPage
url: https://health.aws.amazon.com/health/status
- type: Support
url: https://aws.amazon.com/premiumsupport/
- type: Blog
url: https://aws.amazon.com/blogs/compute/category/compute/amazon-api-gateway/
- type: Console
url: https://console.aws.amazon.com/apigateway/
- type: TermsOfService
url: https://aws.amazon.com/service-terms/
- type: PrivacyPolicy
url: https://aws.amazon.com/privacy/
- type: GitHubOrganization
url: https://github.com/aws
- type: GitHubOrganization
url: https://github.com/aws-samples
title: AWS Samples (121+ API Gateway sample repos)
- type: StackOverflow
url: https://stackoverflow.com/questions/tagged/aws-api-gateway
- type: SpectralRules
url: rules/aws-api-gateway-spectral-rules.yml
- type: Vocabulary
url: vocabulary/aws-api-gateway-vocabulary.yaml
- type: Plans
url: plans/aws-api-gateway-plans-pricing.yml
- type: RateLimitsArtifact
url: rate-limits/aws-api-gateway-rate-limits.yml
- type: FinOps
url: finops/aws-api-gateway-finops.yml
- type: Features
data:
- name: REST API Management
description: >-
Create, deploy, and manage REST APIs with full lifecycle control including stages, deployments, and
versioning.
- name: HTTP API Support
description: Build lightweight HTTP APIs optimized for serverless workloads at up to 71% lower cost than REST APIs.
- name: WebSocket APIs
description: Enable real-time bidirectional communication for chat platforms, streaming dashboards, and live applications.
- name: Traffic Management
description: Handle hundreds of thousands of concurrent API calls with built-in throttling and request validation.
- name: Authorization and Security
description: Supports IAM policies, Lambda authorizers, Amazon Cognito user pools, and OAuth2/OIDC for API access control.
- name: Monitoring and Logging
description: Integration with CloudWatch metrics, access logging, and CloudTrail for full API observability.
- name: Custom Domain Names
description: Map APIs to branded custom domains with TLS certificates managed through AWS Certificate Manager.
- name: Canary Releases
description: Safely roll out API changes using canary deployment stages with configurable traffic splitting.
- name: AWS WAF Integration
description: Protect APIs against common web exploits and DDoS attacks using AWS Web Application Firewall.
- name: SDK Generation
description: Automatically generate client SDKs for deployed APIs in multiple programming languages.
- name: API Caching
description: Reduce backend load and improve response times with configurable response caching at the stage level.
- name: CloudFront Edge Distribution
description: Leverage Amazon CloudFront edge locations for global low-latency API distribution.
- name: Bedrock AgentCore Gateway MCP Target
description: >-
Expose REST API stages as Model Context Protocol (MCP) tools for AI agents via Bedrock AgentCore Gateway.
AgentCore translates incoming MCP requests into HTTP requests, supports tools/list and tools/call methods, and
accepts API_KEY, NO_AUTH, or GATEWAY_IAM_ROLE outbound auth. Launched December 2, 2025.
- name: Developer Portals
description: >-
Native API Gateway Portals (launched November 19, 2025) let you publish PortalProducts containing REST APIs
and per-endpoint documentation. Portals can be shared across AWS accounts and access-controlled via Cognito
user pools.
- name: REST API Response Streaming
description: >-
REST APIs can progressively stream response payloads to clients as they become available (launched November
19, 2025), enabling long-running and incremental response patterns.
- name: Private Integration with Application Load Balancer
description: >-
REST APIs support private integrations with Application Load Balancers (launched November 21, 2025), expanding
private integration options beyond NLB and AWS Cloud Map.
- name: SIGv4a Authentication for REST APIs
description: >-
REST APIs now support AWS Signature Version 4a (launched August 19, 2025), enabling multi-Region signing for
cross-Region API invocations.
- name: Enhanced TLS Security Policies
description: >-
Configurable TLS security policies for REST APIs and custom domain names (launched November 19, 2025) allow
tighter control over accepted protocols and ciphers.
- name: Dual-Stack IPv4/IPv6 Endpoints
description: REST, HTTP, and WebSocket APIs and custom domain names support dual-stack endpoints (launched March 28, 2025).
- type: UseCases
data:
- name: Serverless API Backend
description: Build fully serverless APIs with API Gateway as the front door and AWS Lambda as the backend compute layer.
- name: Microservices Gateway
description: Consolidate access to multiple microservices behind a single API endpoint with routing and load balancing.
- name: Real-Time Applications
description: >-
Enable chat apps, collaborative tools, and live dashboards using WebSocket APIs for persistent bidirectional
connections.
- name: Mobile and Web Application APIs
description: Create secure, scalable REST and HTTP APIs for mobile and web front-ends with Cognito authentication.
- name: Legacy API Modernization
description: Expose existing on-premises or EC2-hosted services as modern REST APIs without rewriting backend logic.
- name: Third-Party API Integration
description: Aggregate and normalize third-party APIs behind a consistent API surface with transformation and mapping.
- name: MCP Tool Server for AI Agents
description: >-
Expose REST APIs as MCP-compatible tool catalogs via Bedrock AgentCore Gateway so AI agents can list and
invoke operations without bespoke client code.
- name: Developer Portal for Partner APIs
description: >-
Use native API Gateway Portals to publish partner-facing REST APIs with branded documentation, Cognito-gated
access, and self-service key issuance.
- type: Integrations
data:
- name: AWS Lambda
description: Invoke Lambda functions as API backends for fully serverless request handling.
- name: Amazon Cognito
description: >-
Authenticate and authorize API requests using Cognito user pools and identity pools. Also used to gate access
to API Gateway Portals.
- name: Amazon CloudWatch
description: Monitor API performance metrics, error rates, and latency with CloudWatch dashboards and alarms.
- name: AWS CloudTrail
description: Audit all API Gateway management API calls for compliance and security monitoring.
- name: Amazon CloudFront
description: Distribute APIs globally through CloudFront edge locations for reduced latency.
- name: AWS WAF
description: Apply web application firewall rules to protect APIs from malicious traffic.
- name: AWS X-Ray
description: Trace requests end-to-end through API Gateway and backend services for performance analysis.
- name: AWS IAM
description: Control API access using IAM policies and resource-based policies for fine-grained authorization.
- name: AWS Certificate Manager
description: Provision and manage TLS certificates for custom domain names on API Gateway.
- name: Amazon VPC
description: Create private APIs accessible only within a VPC using VPC endpoint integration.
- name: Amazon Bedrock AgentCore Gateway
description: >-
Expose API Gateway REST API stages as MCP-compatible tools for AI agents. AgentCore Gateway translates MCP
tools/list and tools/call into HTTP requests against API Gateway. Public REST APIs only; supports API_KEY,
NO_AUTH, or GATEWAY_IAM_ROLE outbound auth. Same-account / same-Region required.
- name: Amazon EventBridge
description: >-
Trigger workflows from API events and integrate APIs with event-driven backends. EventBridge can also drive
asynchronous backends behind HTTP APIs via service integrations.
- name: AWS AppSync
description: >-
Pair API Gateway HTTP / WebSocket APIs with AppSync GraphQL APIs to combine REST/MCP front doors with realtime
GraphQL subscriptions over the same backend services.
- name: Application Load Balancer
description: >-
REST APIs can use private integration to route to internal ALBs inside a VPC (added November 21, 2025) without
requiring NLB or AWS Cloud Map.
- name: AWS Lambda Authorizers
description: >-
Custom request and token authorizers for REST and HTTP APIs that delegate authorization decisions to a Lambda
function.
- name: AWS PrivateLink
description: Expose APIs privately via Interface VPC endpoints; underlies the Private REST API endpoint type.
- name: Amazon Data Firehose
description: Stream access logs to S3, Redshift, or OpenSearch for long-term analysis via Firehose log destinations.
- type: Integrations
url: https://aws.amazon.com/marketplace
integrations:
- name: Sign in
- name: Agent Mode
- name: Why AWS Marketplace?
- name: Get started in AWS Marketplace
- name: Industry
- name: Resources
- name: Become a Channel Partner
- name: Sell in AWS Marketplace
- name: Manage Your Account
maintainers:
- FN: Kin Lane
email: [email protected]