SAA-C03 · Question #208
A company wants to create an API to authorize users by using JSON Web Tokens (JWTs). The company needs to support dynamic access to multiple AWS services by using path-based routing. Which solution…
The correct answer is C. Deploy a Network Load Balancer behind an Amazon API Gateway REST API. Use an AWS. The company needs an API to authorize users with JWTs and enable dynamic path-based routing to various AWS services.
Question
A company wants to create an API to authorize users by using JSON Web Tokens (JWTs). The company needs to support dynamic access to multiple AWS services by using path-based routing. Which solution will meet these requirements?
Options
- ADeploy an Application Load Balancer behind an Amazon API Gateway REST API. Configure IAM
- BDeploy an Application Load Balancer behind an Amazon API Gateway HTTP API. Use Amazon
- CDeploy a Network Load Balancer behind an Amazon API Gateway REST API. Use an AWS
- DDeploy a Network Load Balancer behind an Amazon API Gateway HTTP API. Use Amazon
How the community answered
(33 responses)- A21% (7)
- B6% (2)
- C61% (20)
- D12% (4)
Why each option
The company needs an API to authorize users with JWTs and enable dynamic path-based routing to various AWS services.
Deploying an Application Load Balancer (ALB) as the primary backend for API Gateway might introduce redundant Layer 7 routing if API Gateway is already handling path-based routing, and 'Configure IAM' is too vague for JWT authorization specifics.
An API Gateway HTTP API, while supporting JWTs, typically offers fewer advanced routing and integration features compared to a REST API for complex dynamic access to multiple services.
An Amazon API Gateway REST API supports JWT authorization via custom authorizers or Cognito and can implement path-based routing to direct requests to different backend integrations. For high-performance and stable private integration with backend resources within a VPC, a Network Load Balancer (NLB) can be used as a target for a VPC Link, providing a static IP endpoint for API Gateway to access multiple AWS services.
A Network Load Balancer (NLB) operates at Layer 4 and does not provide path-based routing functionality itself, making it unsuitable if the load balancer is expected to perform this routing.
Concept tested: API Gateway REST API, JWT auth, VPC Link, NLB
Source: https://docs.aws.amazon.com/apigateway/latest/developerguide/apigateway-use-http-proxy-integration.html
Community Discussion
No community discussion yet for this question.