nerdexam
Amazon

SAA-C03 · Question #208

A company wants to create an API to authorize users by using JSON Web Tokens (JWTs). The company needs to support dynamic access to multiple AWS services by using path-based routing. Which solution…

The correct answer is C. Deploy a Network Load Balancer behind an Amazon API Gateway REST API. Use an AWS. The company needs an API to authorize users with JWTs and enable dynamic path-based routing to various AWS services.

Submitted by daniela_cl· Mar 4, 2026Design Secure Architectures

Question

A company wants to create an API to authorize users by using JSON Web Tokens (JWTs). The company needs to support dynamic access to multiple AWS services by using path-based routing. Which solution will meet these requirements?

Options

  • ADeploy an Application Load Balancer behind an Amazon API Gateway REST API. Configure IAM
  • BDeploy an Application Load Balancer behind an Amazon API Gateway HTTP API. Use Amazon
  • CDeploy a Network Load Balancer behind an Amazon API Gateway REST API. Use an AWS
  • DDeploy a Network Load Balancer behind an Amazon API Gateway HTTP API. Use Amazon

How the community answered

(33 responses)
  • A
    21% (7)
  • B
    6% (2)
  • C
    61% (20)
  • D
    12% (4)

Why each option

The company needs an API to authorize users with JWTs and enable dynamic path-based routing to various AWS services.

ADeploy an Application Load Balancer behind an Amazon API Gateway REST API. Configure IAM

Deploying an Application Load Balancer (ALB) as the primary backend for API Gateway might introduce redundant Layer 7 routing if API Gateway is already handling path-based routing, and 'Configure IAM' is too vague for JWT authorization specifics.

BDeploy an Application Load Balancer behind an Amazon API Gateway HTTP API. Use Amazon

An API Gateway HTTP API, while supporting JWTs, typically offers fewer advanced routing and integration features compared to a REST API for complex dynamic access to multiple services.

CDeploy a Network Load Balancer behind an Amazon API Gateway REST API. Use an AWSCorrect

An Amazon API Gateway REST API supports JWT authorization via custom authorizers or Cognito and can implement path-based routing to direct requests to different backend integrations. For high-performance and stable private integration with backend resources within a VPC, a Network Load Balancer (NLB) can be used as a target for a VPC Link, providing a static IP endpoint for API Gateway to access multiple AWS services.

DDeploy a Network Load Balancer behind an Amazon API Gateway HTTP API. Use Amazon

A Network Load Balancer (NLB) operates at Layer 4 and does not provide path-based routing functionality itself, making it unsuitable if the load balancer is expected to perform this routing.

Concept tested: API Gateway REST API, JWT auth, VPC Link, NLB

Source: https://docs.aws.amazon.com/apigateway/latest/developerguide/apigateway-use-http-proxy-integration.html

Community Discussion

No community discussion yet for this question.

Full SAA-C03 Practice