Amazon API Gateway

C tier on API Developer Portal SoftwareScore 6.9 · #4 of 35

Android app: Yes
Free plan: Yes
Runs on: Android, api, iOS, Web

aws.amazon.com

Summary

Amazon API Gateway is a managed service for creating, publishing, maintaining, monitoring, and securing APIs that connect applications with backend services. It supports REST, HTTP, and WebSocket APIs, including two-way real-time communication. Developers can integrate with services such as AWS Lambda, Step Functions, Elastic Beanstalk, EC2, and public HTTP endpoints; HTTP APIs can also route to certain private services. The console connects with Amazon CloudWatch for call, latency, and error metrics, alarms, and execution logs. Authorization choices include IAM, Lambda authorizers, and OIDC and OAuth 2.0 support. REST APIs can use optional API keys with per-key permissions, throttling, and request quotas. Other traffic controls include request throttling and configurable caching for REST APIs. API Gateway Portals provide managed AWS-native locations to discover, document, and govern REST APIs, and the service can generate client SDKs for languages including JavaScript, iOS, and Android. Pricing is usage-based, with no minimum fees or upfront commitments; a free tier is available to new AWS customers for up to 12 months within monthly allowances, with excess use charged at standard rates. WebSocket messages can be up to 128 KB and are metered in 32 KB increments. AWS secures the cloud infrastructure, while customers remain responsible for security in the cloud based on their use, data, and regulatory requirements.

Who it is for

Amazon API Gateway suits teams connecting applications to backend services through REST, HTTP, or WebSocket APIs. It may be useful to developers who need managed monitoring, traffic controls, authorization options, or client SDK generation.

What is good

Supports REST, HTTP, and WebSocket APIs.
Integrates with multiple AWS services and public HTTP endpoints.
CloudWatch integration provides metrics, alarms, and logs.
Offers a free tier for new AWS customers.
Can generate JavaScript, iOS, and Android SDKs.

What to know first

Free-tier use is limited to listed monthly allowances and up to 12 months.
WebSocket messages are limited to 128 KB.
Other AWS services may incur additional charges.

Verdict

Amazon API Gateway combines API creation with monitoring, authorization, and traffic controls across three API types. Consider its usage-based charges, free-tier limits, and customer-side cloud security responsibilities when evaluating it.

Amazon API Gateway plans and pricing

All plans

Free Tier Free Free usage for up to 12 months; usage above the listed monthly allowances is charged at standard rates. 1M REST API calls/month · 1M HTTP API calls/month · 1M WebSocket messages/month · 750,000 WebSocket connection minutes/month · New AWS customers only aws.amazon.com · 5 Oct 2026

Pay-as-you-go Not published Usage-based: API calls and data transferred out for HTTP and REST APIs; messages and connection minutes for WebSocket APIs. No minimum fees or upfront commitments · Private APIs have no data transfer out charge · Additional charges may apply for other AWS services aws.amazon.com · 5 Oct 2026

Compared on API developer portal software

Free plan: Noaws.amazon.com

Facts

Purpose: Amazon API Gateway is a fully managed service for creating, publishing, maintaining, monitoring, and securing APIs that connect applications to backend services.aws.amazon.com · 5 Oct 2026
API types: It supports REST APIs, HTTP APIs, and WebSocket APIs for real-time two-way communication.aws.amazon.com · 5 Oct 2026
Developer portals: API Gateway Portals provide managed AWS-native portals to discover, document, and govern REST APIs.aws.amazon.com · 5 Oct 2026
Private integrations: HTTP APIs can route requests to services behind private application or network load balancers and IP-based services registered in AWS Cloud Map.aws.amazon.com · 5 Oct 2026
Traffic controls: API Gateway supports request throttling, and REST APIs can use a cache with configurable keys and time-to-live.aws.amazon.com · 5 Oct 2026
Backends: It can integrate with AWS Lambda, Step Functions, Elastic Beanstalk, EC2, and publicly accessible HTTP endpoints.aws.amazon.com · 5 Oct 2026
Monitoring: The API Gateway console integrates with Amazon CloudWatch for API call, latency, and error metrics, alarms, and execution logs.aws.amazon.com · 5 Oct 2026
Authorization: Authorization options include AWS IAM and access policies, Lambda authorizers, and native OIDC and OAuth 2.0 support.aws.amazon.com · 5 Oct 2026
API keys: For REST APIs, API keys can have per-key access permissions, throttling, and request quota plans; their use is optional.aws.amazon.com · 5 Oct 2026
Client SDKs: API Gateway can generate client SDKs for languages including JavaScript, iOS, and Android.aws.amazon.com · 5 Oct 2026
Compliance: AWS describes API Gateway as supporting architectures intended to meet SOC, PCI, ISO, FedRAMP, and HIPAA requirements.docs.aws.amazon.com · 5 Oct 2026
Shared security responsibility: AWS secures the cloud infrastructure, while customers are responsible for security in the cloud based on their service use and data and regulatory requirements.docs.aws.amazon.com · 5 Oct 2026
Usage limit: WebSocket API messages can be up to 128 KB and are metered in 32 KB increments; control frames such as ping and pong are not metered.aws.amazon.com · 5 Oct 2026
Maker: Amazon Web Services says it launched in 2006; the opened AWS About page does not state its headquarters.aws.amazon.com · 5 Oct 2026