Amazon API Gateway

Overview

Amazon API Gateway is a cloud service for building, publishing, monitoring, and securing APIs that connect applications with backend services. It is best suited to teams building on AWS that want REST, HTTP, and WebSocket APIs with AWS integrations and controls. Its broad API coverage and usage-based billing are compelling, but costs above the Free Tier depend on traffic and data transfer.

Key features

Gateway supports REST and HTTP APIs for request-response traffic, plus WebSocket APIs for two-way real-time communication. It can route requests to Lambda, Step Functions, Elastic Beanstalk, EC2, and publicly accessible HTTP endpoints. HTTP APIs can also connect to services behind private application or network load balancers, or IP-based services registered in AWS Cloud Map. That range makes it useful when API traffic needs to reach a mix of AWS and external backends.

Traffic controls include request throttling; REST APIs can also cache responses using configurable keys and time-to-live settings. For REST APIs, optional API keys can carry per-key access permissions, throttling, and request quotas. These controls help manage usage, though the API key features apply to REST APIs rather than every API type.

Authorization options include IAM and access policies, Lambda authorizers, Cognito user pools, JWT/OIDC/OAuth 2.0, API keys, and mutual TLS. The console integrates with CloudWatch for call, latency, and error metrics, alarms, and execution logs. API Gateway can generate client SDKs for languages including JavaScript, iOS, and Android. Its managed portals support discovery, documentation, and governance for REST APIs.

WebSocket messages can be up to 128 KB, and usage is metered in 32 KB increments; ping and pong control frames are not metered. Teams with frequent large messages should account for that metering structure when estimating usage.

Pricing

The Free Tier costs nothing for up to 12 months and is limited to new AWS customers. It includes 1M REST API calls/month, 1M HTTP API calls/month, 1M WebSocket messages/month, and 750,000 WebSocket connection minutes/month. Usage above those monthly allowances is charged at standard rates, so this is a time-limited way to evaluate or start small, not a permanently free plan.

Pay-as-you-go has custom pricing. HTTP and REST APIs are billed by API calls and data transferred out; WebSocket APIs by messages and connection minutes. There are no minimum fees or upfront commitments, and private APIs have no data transfer out charge. Other AWS services may add charges. This suits variable workloads, but buyers need to estimate both request volume and transfer or connection usage rather than rely on a fixed subscription price.

Platforms

Amazon API Gateway is a cloud deployment supporting web, API, Android, and iOS contexts, with HTTP, REST, and WebSocket protocols. AWS describes architectures using the service as intended to meet SOC, PCI, ISO, FedRAMP, and HIPAA requirements. AWS secures the cloud infrastructure; customers remain responsible for security in the cloud according to their service use, data, and regulatory requirements.

Who it's for

It is a strong fit for teams already using AWS services as API backends, especially those needing multiple API styles, throttling, monitoring, and several authorization choices in one managed service. It is less compelling for buyers who need predictable fixed pricing, self-managed deployment, or a free allowance that continues indefinitely.

Pros and cons

• Pros: REST, HTTP, and WebSocket support covers both conventional APIs and real-time two-way communication.
• Pros: AWS backend integrations and private routing can keep API connections close to AWS-hosted services.
• Pros: CloudWatch metrics, alarms, and logs connect monitoring to the AWS console.
• Cons: The Free Tier is restricted to new AWS customers and lasts up to 12 months; excess use is charged at standard rates.
• Cons: Pay-as-you-go costs vary with calls, data transfer, messages, and connection minutes, with possible charges from other AWS services.
• Cons: REST-specific options such as caching and per-key quotas do not apply across all API types.

Alternatives

For a broader comparison, browse API Gateway Software, API Management Software, or API Developer Portal Software.

Apinizer is worth considering when self-managed hosting and a free tier capped at three API proxies better suit the deployment. Gravitee API Gateway offers a free Apache 2.0 community edition for teams seeking a community gateway option. Kong Gateway may suit teams wanting a 30-day trial with no Gateway limits and 30 days of analytics retention.

Zuplo is an alternative for smaller workloads: its free plan is forever for up to 100K requests/month and includes two account members and five environments. Apigee API hub is available at no additional cost to eligible Apigee organizations in supported regions. For documentation-focused needs, ReadMe has a free Starter plan with one project, one published version, and 24 hours of request history and detailed logs.

Workato Developer API Portal includes API management and 10,000+ app and system integrations in its free plan, alongside 50K one-time credits. Oracle Integration is another option, with Standard and Enterprise plans each listing 5,000 messages per hour.

Verdict

Choose Amazon API Gateway if your APIs need managed AWS connectivity, several API protocols, and integrated traffic and monitoring controls. Its main advantage is how directly it connects API management to AWS backends; its main drawback is that ongoing costs depend on usage dimensions that can be difficult to predict without a workload estimate. Look elsewhere if you need self-managed deployment or a clear, durable fixed-price allowance.