AWS Deep Dive

Amazon API Gateway

Continued notes about the Amazon API Gateway.

Working With WebSocket APIs

Setting Up Custom Domain Names for WebSocket APIs in API Gateway

WebSocket APIs only support TLS 1.2 (what, no TLS 1.3?) and cannot share a domain name with non-WebSocket APIs. The domain name used to call an API is available as $context.domainName. Certificates must be provisioned by or imported into ACM for in the appropriate region.

APIs can be mapped either to the domain itself (in which case only a single API is supported) or to a particular path from that domain.

Protecting Your WebSocket API in API Gateway

Throttling hierarchy: AWS > account and region > route and stage.