UNIT - 3

Networking & Content Delivery – Amazon API Gateway, Amazon CloudFront, Direct
Connect, AWS Networking and Content Delivery, Amazon VPC (Virtual Private Cloud),
VPC Peering.
Security Identification and Compline – AWS Security and Compliance, AWS Shared
Responsibility Model, AWS Key Management Service (KMS), AWS WAF (Web
Application Firewall), AWS Shield, AWS Security Best Practices
AWS API
• What is an API?
• APIs are mechanisms that enable two software components to
communicate with each other using a set of definitions and protocols.
• What does API stand for?
• API stands for Application Programming Interface. In the context of APIs,
the word Application refers to any software with a distinct function.
Interface can be thought of as a contract of service between two
applications. This contract defines how the two communicate with each
other using requests and responses. Their API documentation contains
information on how developers are to structure those requests and
responses.

28-02-2025 Dr. C. P. Koushik, Assistant Professor, VIT Bhopal University 2

• How do APIs work?
• API architecture is usually explained in terms of client and server. The
application sending the request is called the client, and the
application sending the response is called the server. (So in the
weather example, the bureau’s weather database is the server, and
the mobile app is the client).

28-02-2025 Dr. C. P. Koushik, Assistant Professor, VIT Bhopal University 3

• SOAP APIs
• These APIs use Simple Object Access Protocol. Client and server exchange
messages using XML. This is a less flexible API that was more popular in the
past.
• RPC APIs
• These APIs are called Remote Procedure Calls. The client completes a
function (or procedure) on the server, and the server sends the output back to
the client.
• Websocket APIs
• Websocket API is another modern web API development that uses JSON
objects to pass data. A WebSocket API supports two-way communication
between client apps and the server. The server can send callback messages
to connected clients, making it more efficient than REST API.
• REST APIs
• These are the most popular and flexible APIs found on the web today. The
client sends requests to the server as data. The server uses this client input
to start internal functions and returns output data back to the client. Let’s
look at REST APIs in more detail below.

28-02-2025 Dr. C. P. Koushik, Assistant Professor, VIT Bhopal University 5

What are REST APIs?
• REST stands for Representational State Transfer. REST defines a
set of functions like GET, PUT, DELETE, etc. that clients can use to
access server data. Clients and servers exchange data using HTTP.
• The main feature of REST API is statelessness. Statelessness
means that servers do not save client data between requests.
Client requests to the server are similar to URLs you type in your
browser to visit a website. The response from the server is plain
data, without the typical graphical rendering of a web page.

28-02-2025 Dr. C. P. Koushik, Assistant Professor, VIT Bhopal University 6

• API Gateway
• Purpose: AWS API Gateway is used to create, publish, maintain, monitor, and
secure REST, HTTP, and WebSocket APIs at any scale.
• Key Features:
• Integration with various AWS services (e.g., Lambda, DynamoDB, S3)
• Custom domain names and SSL/TLS encryption
• Throttling, request/response transformation, and monitoring
• Versioning and staging of APIs
• API keys and usage plans to manage access
• Integration with AWS WAF (Web Application Firewall) for enhanced security
• Use Cases:
• Backend for mobile and web applications
• Serverless applications using AWS Lambda
• Microservices architecture

28-02-2025 Dr. C. P. Koushik, Assistant Professor, VIT Bhopal University 15

• EC2 (Elastic Compute Cloud) API
• Purpose: EC2 provides scalable computing capacity in the cloud. The EC2
API allows you to control and configure instances, storage, networking, and
security.
• Key Features:
• Launch, describe, terminate, and manage EC2 instances
• Create and manage Amazon Machine Images (AMIs)
• Configure security groups, key pairs, and Elastic IPs
• Manage instance states (start, stop, reboot)
• Auto-scaling and load balancing
• Use Cases:
• Automating infrastructure setup
• Managing virtual machine instances programmatically
• Creating scalable web applications

28-02-2025 Dr. C. P. Koushik, Assistant Professor, VIT Bhopal University 16

• S3 (Simple Storage Service) API
• Purpose: S3 API is used to manage data storage, retrieve data from
anywhere, and manage buckets.
• Key Features:
• Object storage for any amount of data
• Highly durable, with automatic replication across availability zones
• APIs for uploading, downloading, and managing objects (files)
• Support for lifecycle policies, versioning, and data encryption
• Signed URLs for secure, temporary access to objects
• Use Cases:
• Backup and recovery of files
• Data lake for analytics
• Content distribution for websites

28-02-2025 Dr. C. P. Koushik, Assistant Professor, VIT Bhopal University 17

• Lambda API
• Purpose: AWS Lambda enables you to run code in response to events
without managing servers.
• Key Features:
• Automatically scales your application by running code in response to triggers
• Integrated with other AWS services like S3, DynamoDB, API Gateway, and
Kinesis
• Custom event sources for external events (HTTP, API calls, etc.)
• Supports various programming languages (Node.js, Python, Java, Go, Ruby, etc.)
• Use Cases:
• Real-time file processing (e.g., image resizing, data validation)
• Event-driven applications (e.g., notifications, workflow automation)
• Backend for IoT applications

28-02-2025 Dr. C. P. Koushik, Assistant Professor, VIT Bhopal University 18

• IAM (Identity and Access Management) API
• Purpose: IAM API manages access to AWS services and resources
securely.
• Key Features:
• Control who can use AWS resources (users, groups, and roles)
• Manage policies and permissions
• Support for Multi-Factor Authentication (MFA)
• Temporary security credentials with AWS Security Token Service (STS)
• Auditing and compliance tracking through CloudTrail integration
• Use Cases:
• Role-based access control for teams and applications
• Securing AWS resources by least privilege access
• Federating user access with other identity providers

28-02-2025 Dr. C. P. Koushik, Assistant Professor, VIT Bhopal University 19

• Service APIs
• These are the most common types of AWS APIs, allowing users to interact
directly with specific AWS services like EC2, S3, Lambda, and RDS.
• Characteristics:
• Allow users to programmatically manage resources (e.g., launching EC2 instances,
storing data in S3, creating RDS databases).
• Provide RESTful interfaces, usually following HTTP methods (GET, POST, PUT, DELETE).
• Can be accessed via the AWS SDK, AWS CLI, or HTTP requests.
• Examples:
• EC2 API: Control virtual machine instances, manage security groups, key pairs, and
Elastic IPs.
• S3 API: Store, retrieve, and manage data in object storage using PUT, GET, and DELETE
operations.
• DynamoDB API: Query and manage data in a NoSQL database, supporting high
scalability and performance.

28-02-2025 Dr. C. P. Koushik, Assistant Professor, VIT Bhopal University 20

Management APIs
•These APIs are designed for management and automation of AWS
infrastructure and services. They are used to provision, manage, and monitor AWS
resources.
•Characteristics:
•Focus on resource management (e.g., creating stacks, managing infrastructure).
•Used for automating tasks like deployment, configuration, monitoring, and security.
•Provide mechanisms for automating DevOps practices, continuous integration, and delivery
(CI/CD).
•Examples:
•CloudFormation API: Automate the provisioning of AWS infrastructure using templates. It
supports actions like CreateStack, UpdateStack, and DeleteStack.
•CloudWatch API: Monitor resources and set alarms for cloud applications. Common operations
include PutMetricData, GetMetricStatistics, and DescribeAlarms.

28-02-2025 Dr. C. P. Koushik, Assistant Professor, VIT Bhopal University 21

Authentication and Security APIs
•These APIs handle security-related tasks like access control, identity
management, and encryption.
•Characteristics:
•Used to authenticate and authorize users or services.
•Support Multi-Factor Authentication (MFA), encryption key management, and secure data
handling.
•Often work with AWS Identity and Access Management (IAM) and Key Management Service
(KMS).
•Examples:
•IAM API: Manage users, groups, roles, and policies for controlling access to AWS resources.
Common operations include CreateUser, AttachUserPolicy, and AssumeRole.
•AWS KMS API: Create and manage encryption keys for data encryption and digital signatures.
Example operations include Encrypt, Decrypt, and GenerateDataKey.

28-02-2025 Dr. C. P. Koushik, Assistant Professor, VIT Bhopal University 22

28-02-2025 Dr. C. P. Koushik, Assistant Professor, VIT Bhopal University 24
28-02-2025 Dr. C. P. Koushik, Assistant Professor, VIT Bhopal University 25
28-02-2025 Dr. C. P. Koushik, Assistant Professor, VIT Bhopal University 26
28-02-2025 Dr. C. P. Koushik, Assistant Professor, VIT Bhopal University 27
28-02-2025 Dr. C. P. Koushik, Assistant Professor, VIT Bhopal University 28
28-02-2025 Dr. C. P. Koushik, Assistant Professor, VIT Bhopal University 29
 Amazon VPC

28-02-2025 Dr. C. P. Koushik, Assistant Professor, VIT Bhopal University 30

28-02-2025 Dr. C. P. Koushik, Assistant Professor, VIT Bhopal University 31
28-02-2025 Dr. C. P. Koushik, Assistant Professor, VIT Bhopal University 32
28-02-2025 Dr. C. P. Koushik, Assistant Professor, VIT Bhopal University 33
28-02-2025 Dr. C. P. Koushik, Assistant Professor, VIT Bhopal University 34
28-02-2025 Dr. C. P. Koushik, Assistant Professor, VIT Bhopal University 35
28-02-2025 Dr. C. P. Koushik, Assistant Professor, VIT Bhopal University 36
 VPC Networking

28-02-2025 Dr. C. P. Koushik, Assistant Professor, VIT Bhopal University 37

28-02-2025 Dr. C. P. Koushik, Assistant Professor, VIT Bhopal University 38
Internet gateway

28-02-2025 Dr. C. P. Koushik, Assistant Professor, VIT Bhopal University 39

28-02-2025 Dr. C. P. Koushik, Assistant Professor, VIT Bhopal University 40
NAT Gateway

28-02-2025 Dr. C. P. Koushik, Assistant Professor, VIT Bhopal University 41

28-02-2025 Dr. C. P. Koushik, Assistant Professor, VIT Bhopal University 42
VPC Sharing

28-02-2025 Dr. C. P. Koushik, Assistant Professor, VIT Bhopal University 43

28-02-2025 Dr. C. P. Koushik, Assistant Professor, VIT Bhopal University 44
28-02-2025 Dr. C. P. Koushik, Assistant Professor, VIT Bhopal University 45
28-02-2025 Dr. C. P. Koushik, Assistant Professor, VIT Bhopal University 46
AWS Direct Connect

28-02-2025 Dr. C. P. Koushik, Assistant Professor, VIT Bhopal University 47

28-02-2025 Dr. C. P. Koushik, Assistant Professor, VIT Bhopal University 48
28-02-2025 Dr. C. P. Koushik, Assistant Professor, VIT Bhopal University 49
28-02-2025 Dr. C. P. Koushik, Assistant Professor, VIT Bhopal University 50
28-02-2025 Dr. C. P. Koushik, Assistant Professor, VIT Bhopal University 51