How does apigateway support different regions

0

I want build services in regionA with Account A, so that regionB with accountB, regionC with accountC can send api requests with apigateway to service in regionA. So I want to know that the mechanism of apigateway support different regions and the process of authenticating the different regions. Thanks!

  • forgot to attention, region A is CN region, and region B and region C based in US-east, is it accessible in api gateway?

3 Answers
2

API Gateway doesn't care where the requests are coming from (except for private APIs). This means that they can be from the same region, from other regions, or from clients all over the world. All it cares is that the client presents the right credentials.

API Gateway supports several authorization methods: IAM, Cognito and custom. In your case, because the API clients are actually services running in AWS, I would recommend using IAM authorization. You will need to establish an API Gateway resource policy that allows the other accounts to call the API. You will also need to create IAM roles in the other accounts that allow access to the API.

You can find more information here.

profile pictureAWS
EXPERT
Uri
answered 2 years ago
0

To add to that, when you make requests from your Account B in Region B, or Account C in Region C using the IAM authorization, you'll need to sign the request using AWS SigV4 (see https://docs.aws.amazon.com/general/latest/gr/signing_aws_api_requests.html)

answered 2 years ago
0

For some additional info, please have a look at this post which covers a number of scenarios for building a global application or API .. https://repost.aws/questions/QUSs8ODCyJSRWR7mawaUIl4g/multi-region-strategy-for-api-gateway

profile pictureAWS
micah
answered 2 years ago

You are not logged in. Log in to post an answer.

A good answer clearly answers the question and provides constructive feedback and encourages professional growth in the question asker.

Guidelines for Answering Questions