Question 310
A media platform exposes a resilient public API over serverless services. The team confirms that the public API needs request validation and authorization before invoking business code. What is the most appropriate correction?
Explanation
Correct Answer
The scenario identifies this requirement: The public API needs request validation and authorization before invoking business code. Select Configure API Gateway authentication and request validation for supported routes as the specified technical mechanism. API management filters unauthorized or malformed calls early. This response addresses the problem described rather than a different design goal.
Incorrect Answers
The option Apply reserved or provisioned concurrency and upstream retry/backpressure strategy as appropriate addresses a separate condition: lambda concurrency limits cause 429 and throttling during promotions. Lambda concurrency controls bound simultaneous executions. The actual requirement is the public API needs request validation and authorization before invoking business code. Recommended corrective action: Configure API Gateway authentication and request validation for supported routes. API management filters unauthorized or malformed calls early.
For the alternative failure long-running video conversions exceed Lambda's maximum execution duration, the control Use AWS Step Functions plus suitable ECS/Batch tasks for longer jobs is relevant: orchestrated workloads avoid Lambda runtime-duration limits. Here the evidence instead is the public API needs request validation and authorization before invoking business code. The selected technical mechanism is Configure API Gateway authentication and request validation for supported routes: API management filters unauthorized or malformed calls early.
Use Amazon API Gateway with Lambda integration solves a different operational problem where web clients require a managed HTTPS entry for Lambda operations. API Gateway fronts serverless APIs and routing. It does not directly address the public API needs request validation and authorization before invoking business code. The case calls for Configure API Gateway authentication and request validation for supported routes, since API management filters unauthorized or malformed calls early.