Amazon API Gateway is a fully managed service that allows creating, publishing, securing, monitoring, and scaling REST, HTTP, and WebSocket APIs without server management.
It acts as a gateway between the frontend (clients) and backend (Lambdas, EC2, DynamoDB, etc.) by handling rate limits, security, validation, and request/response transformations.
There are three types of APIs in API Gateway: REST API for classic RESTful APIs, HTTP API for lightweight, low-cost APIs, and WebSocket API for real-time, two-way communication.
API Gateway offers security features like IAM authorization, Cognito authentication, custom Lambda authorizers, API keys, and WAF integration. It also provides options for transformations, throttling and quotas, monetization, and monitoring with CloudWatch.