Category: Amazon API Gateway

Traditional security approaches are often unable to detect and stop complex API attacks. It was for exactly this purpose that Salt Security was established in 2018. Salt’s founders have a unique patent to use big data and AI/ML that allows Salt to spearhead the growing industry of dedicated API security solutions. Learn how the Salt Security platform allows for the analysis of API traffic that exposes complex attacks, including those identified in the OWASP API Security Top 10 list.

The modern API lifecycle does not end once your CI/CD pipeline pushes a deployment to production and the API becomes available to clients. They still have to access documentation, try out different parts of the API, or get notifications about changes. API developer portals have become standard for businesses offering APIs to their partners and end users. Learn how to integrate ReadMe.com with Amazon API Gateway to make sure your documentation is up to date and gets changed every time you change the API.

Most applications require a form of identity service to manage, authenticate, and authorize users. In SaaS applications, multi-tenancy adds specific challenges to this task. To meet these needs, SaaS builders must consider integrating with an identity service provider. AWS services such as Amazon Cognito or AWS Partner services like Auth0 provide deep expertise in the field and allow you to focus on your SaaS application’s value proposition while relying on a secure, feature-rich identity provider.

Every SaaS architecture must introduce mechanisms and policies that prevent noisy neighbor conditions. Getting these policies right is essential to building a robust SaaS solution that delivers a consistent experience to customers. This post looks at the different strategies that can be used to introduce the throttles (transaction rate) and quotas (transaction volume) that manage each tenant’s activity, exploring the various AWS services that can be used to bring these concepts to life.

There is a growing need for automotive dealers to adopt innovative technology to transition into the digital era smoothly, as customers are leaning towards secure, cloud-native solutions with modern features that are backed by superior support. Learn how Tech Mahindra transformed a monolithic application into a resilient and reliable solution to support expanding dealer networks. To build this cloud-native transformation approach, Tech Mahindra used AWS and a microservices-based API-first architecture.

The Pega Digital Messaging Service allows customer service applications to receive and send messages in a simplified, consistent format over digital channels such as Apple Messages for Business, Facebook, SMS, WhatsApp, Twitter, and web chat. This post explores how Pegasystems built a solution to enable the Pega Digital Messaging service to manage inbound multi-tenant WebSocket connection and message rates using Amazon API Gateway, AWS Lambda, SQS, and Amazon DynamoDB.

As multi-tenant SaaS providers look to leverage machine learning services, they must consider how they’ll protect the data that flows in and out of these services from different tenants. Learn how tenant isolation of machine learning services can be achieved using AWS IAM, and how the integration between IAM, Amazon SageMaker, and many other AWS services provide developers with a rich set of mechanisms that can be applied to realize tenant isolation goals.

While modernizing customer mainframes, the team at AWS Blu Age discovered that Batch can be a complex aspect of a mainframe migration to AWS. It’s critical to design your AWS architecture to account for the key Batch stringent performance requirements such as intensive I/Os, large datasets, and short durations. Let’s explore how to migrate mainframe Batch to AWS microservices using AWS Blu Age automated transformation technology.

AWS Service Catalog allows organizations to centrally manage commonly deployed IT services, achieve consistent governance, and help meet compliance requirements. AWS Service Catalog provides a standardized landscape for product provisioning. Users browse listings of products (services or applications) that they have access to, locate the product that they want to use, and launch it on […]