SAA-C03 Question #432: Real Exam Question with Answer & Explanation

Question

A company runs an application on Amazon EC2 instances behind an Application Load Balancer (ALB). The company wants to create a public API for the application that uses JSON Web Tokens (JWT) for authentication. The company wants the API to integrate directly with the ALB. Which solution will meet these requirements?

Options

• AUse Amazon API Gateway to create a REST API.
• BUse Amazon API Gateway to create an HTTP API.
• CUse Amazon API Gateway to create a WebSocket API.
• DUse Amazon API Gateway to create a gRPC API.

Explanation

Amazon API Gateway supports multiple API types: REST, HTTP, WebSocket, and gRPC. HTTP APIs are a newer, lightweight option that support JWT authorizers natively, enabling secure, scalable authentication for APIs with JSON Web Tokens. HTTP APIs can integrate with ALBs as a backend target, providing direct connectivity and simplified API management with JWT authentication built in. REST APIs support JWT but are more feature-rich and complex, often used for legacy or more complex use cases, and have higher costs and latency. WebSocket APIs are for real-time, bidirectional communication, which is not requested here. gRPC APIs support RPC calls but are less common for public HTTP-based APIs with JWT auth. Therefore, HTTP API with JWT authorizers is the best fit for this use case.

No community discussion yet for this question.