The gateway is the first layer of protection. When traffic comes in, we need to complete a couple of validation steps such as adding a rate limit. We then scan documents for viruses and upload them. All information and data needs to be sanitized before it enters a private domain and we use this solution to do this.
App building platform that plays an important role in security and the scanning of data
Pros and Cons
- "All information and data needs to be sanitized before it enters a private domain and we use this solution to do this."
- "From a use cases perspective, you need to have an internal and external gateway. AWS can only handle external traffic so has to be used together with another solution."
What is our primary use case?
What is most valuable?
The most valuable feature of this solution is the SQL injection.
What needs improvement?
The UI and UX of this solution could be improved. From a use cases perspective, you need to have an internal and external gateway. AWS can only handle external traffic so has to be used together with another solution.
For how long have I used the solution?
We have been using this solution for two years.
Buyer's Guide
Amazon API Gateway
October 2025

Learn what your peers think about Amazon API Gateway. Get advice and tips from experienced pros sharing their opinions. Updated: October 2025.
869,785 professionals have used our research since 2012.
What do I think about the stability of the solution?
This is a stable solution.
What do I think about the scalability of the solution?
This is a scalable solution.
How are customer service and support?
A lot of learning materials are available and it is easier than it used to be to use. Previously you needed to pay for support.
How would you rate customer service and support?
Neutral
How was the initial setup?
The initial setup is straightforward. From security perspective, it takes time to get everything approved.
Which other solutions did I evaluate?
Huawei has their own version of API Gateway, which is equivalent or better than AWS in some cases. It is pre integrated with standard security features.
What other advice do I have?
The suitability of this solution depends on an organization's use case and architecture.
I would rate this solution an eight out of ten.
Disclosure: My company does not have a business relationship with this vendor other than being a customer.

Project Manager at Yukon
Easy to use in combination with other Amazon services and enables us to to assess our internal services in our VPC
Pros and Cons
- "Amazon stack is easy to use in combination with other Amazon services, so it was a logical continuity."
- "The user interface could be improved, as well as customer support and having a local customer representative in a country."
What is our primary use case?
We use an API from Amazon to assess our internal services in our VPC and to limit the access of certain users to API and to have an execution plan. Certain users have certain access to API calls that they could use to give them an assessed quota.
The solution is deployed on a private cloud.
What is most valuable?
Amazon stack is easy to use in combination with other Amazon services, so it was a logical continuity. We use Amazon Lambda, so using Amazon API Gateway is the logical continuity of the same step. It wouldn't be very practical to use technology from Azure because we are already using Amazon.
What needs improvement?
The user interface could be improved, as well as customer support and having a local customer representative in a country. Monitoring could also be improved a bit.
For how long have I used the solution?
I have been using this solution for one year.
What do I think about the stability of the solution?
The solution is stable so far.
What do I think about the scalability of the solution?
It is scalable.
How are customer service and support?
I haven't had a case where I needed to talk to a local representative, but as an overall problem for sales, that is something that could be improved.
We usually find answers on the internet or through other materials.
How was the initial setup?
The solution was easy to set up. I did the setup by myself.
What's my experience with pricing, setup cost, and licensing?
I am satisfied with the price.
Which other solutions did I evaluate?
We evaluated other options like Microsoft. They are very similar, but because of our customers, they insist on using Amazon.
What other advice do I have?
I would rate this solution 8 out of 10.
If you get used to a certain technology, you would definitely recommend it to your customer because you have experience. We recommend this technology to our customers because we are using it for other products and we have experience, and then the core learning or integration course is shorter.
Which deployment model are you using for this solution?
Private Cloud
Disclosure: My company does not have a business relationship with this vendor other than being a customer.
Buyer's Guide
Amazon API Gateway
October 2025

Learn what your peers think about Amazon API Gateway. Get advice and tips from experienced pros sharing their opinions. Updated: October 2025.
869,785 professionals have used our research since 2012.
Sr. Technology Specialist at a computer software company with 5,001-10,000 employees
It's easy to integrate and provide support for existing AWS services
Pros and Cons
- "It's easy to integrate and provide support for existing AWS services if I use the AWS API gateway."
- "I am not completely satisfied with Technical Support."
What is our primary use case?
We use it for API routing and managing traffic. These are managed authentications between the API and back to primary users.
What is most valuable?
Our services are deployed only in AWS Cloud. It's easy to integrate and provide support for existing AWS services if I use the AWS API gateway. I'm going to continue using it for my projects. A few of the projects are deployed in Amazon, some in GCP, but most are on the AWS.
What needs improvement?
I am not completely satisfied with Technical Support. They were finding it difficult to get to the AWS API gateway. Also, the traffic percentage was not calculating correctly.
For how long have I used the solution?
I have used Amazon API gateway for a year or so. We use a Hybrid version.
What do I think about the stability of the solution?
It's very stable. I'm satisfied with that.
What do I think about the scalability of the solution?
I'm satisfied.
How are customer service and technical support?
I am not completely satisfied with Technical Support.
How was the initial setup?
It's straightforward. It took 15 minutes to deploy.
What about the implementation team?
We implemented this in-house.
Which other solutions did I evaluate?
We compared Google APIG to the Amazon APIG. The Google APIG is more for the open banking APIWSA2. The Google APIG are more advanced in terms of the open banking API compared to the AWS API gateway.
What other advice do I have?
I recommend it for open banking. I would rate it 8 out of 10. To get to 10 it would It would need more support for open banking, via the open API. If your existing workloads are in AWS, then you can surely go for the AWS Amazon, AWS API gateway. If it is a hybrid solution, then I would suggest you go for WSA2. Konghybrid GCP is also good.
Which deployment model are you using for this solution?
Hybrid Cloud
If public cloud, private cloud, or hybrid cloud, which cloud provider do you use?
Amazon Web Services (AWS)
Disclosure: My company does not have a business relationship with this vendor other than being a customer.
Snr. Developer at Mama Money Pty
User-friendly and has good scalability
Pros and Cons
- "The solution is user-friendly."
- "The course management needs improvement. It's always an issue to set up the course management, especially when you use data form."
What is most valuable?
The solution is user-friendly.
What needs improvement?
The course management needs improvement. It's always an issue to set up the course management, especially when you use data form. We use a lot of TerraForm scripts to build up our environment. The rest is pretty straightforward and pretty easy to use.
For how long have I used the solution?
I have experience with Amazon API Gateway.
What do I think about the scalability of the solution?
The scalability is good. There are one hundred thousand users using it in our company. I rate the overall solution a ten out of ten.
How was the initial setup?
The initial setup is not easy as it includes a lot of steps.
What other advice do I have?
Overall, the solution is a nine out of ten.
Which deployment model are you using for this solution?
On-premises
Disclosure: My company does not have a business relationship with this vendor other than being a customer.
Technical Manager at a computer software company with 10,001+ employees
A complete solution with good security, integration, and stability
Pros and Cons
- "Its security feature is the most valuable because it is mainly a security solution. It has easy authentication and authorization, and its integration is also useful."
- "The user interface, in general, can be better. The user interface for the entire Amazon cloud can be more friendly. There are some scenarios that are not really easy to manage and configure through the user interface."
What is our primary use case?
We use it for normal API purposes.
What is most valuable?
Its security feature is the most valuable because it is mainly a security solution. It has easy authentication and authorization, and its integration is also useful.
What needs improvement?
The user interface, in general, can be better. The user interface for the entire Amazon cloud can be more friendly. There are some scenarios that are not really easy to manage and configure through the user interface.
For how long have I used the solution?
I have been using this solution for more or less one year.
What do I think about the stability of the solution?
Its stability is great.
What do I think about the scalability of the solution?
It is very scalable because it is in the cloud. We might have around ten thousand users of this solution. The client for whom we deployed this solution is using this solution and won't be changing it or increasing its usage in the near future.
How are customer service and technical support?
I haven't really used technical support. Its documentation is really good and complete. There are a lot of things on the website that you can use.
Which solution did I use previously and why did I switch?
We didn't have a different solution.
How was the initial setup?
It is ready to be used because it is in the cloud. It is very straightforward to set it up with some support. The deployment duration depends on the number of services, but generally, it takes around two hours.
What about the implementation team?
We used an in-house resource. In terms of maintenance, we have a team that supervises not only this product but also other products. I think the product itself doesn't require much monitoring or maintenance. It is really managed by the cloud.
Which other solutions did I evaluate?
We didn't evaluate other options because our environment is in Amazon, so it didn't make sense to use another solution.
What other advice do I have?
This is a good solution for anyone whose strategy is to run entirely on Amazon. You basically have to use another approach if that's not the case. If you have a hybrid cloud or if you are trying to be independent of the cloud, this is not a good solution for you.
I would rate Amazon API Gateway an eight out of ten. It is a complete solution.
Which deployment model are you using for this solution?
Public Cloud
Disclosure: My company has a business relationship with this vendor other than being a customer. Partner
Digital Architecture Manager at a tech services company with 10,001+ employees
Easy to get started and to use
Pros and Cons
- "In terms of most valuable features, it would say that it is really easy to start working with it."
- "It would be useful to have a more complete development environment for the developer, with different integrative capabilities to manage all the life cycles for the API. I think the full version formula for that is really useful. They should improve the development environment for easier integration."
What is our primary use case?
I use AWS API Management and Mulesoft because I work on different solutions and I am in a different layer, because I most focused on backend solutions. I have participated in some projects using these tools but I am not a developer or an expert.
We have designed and implemented RESTful API's. For example, based on Microservices with Spring Boot and AKS or OpenShift.
What is most valuable?
In terms of the most valuable features, it would say that it is really easy to start working with it.
I'm fine with the interface. It's okay. I think it also is really useful with the pay per-use. The cost is interesting.
What needs improvement?
It would be useful to have a more complete development environment for the developer, with different integrative capabilities to manage all the life cycles for the API. I think the full version formula for that is really useful. They should improve the development environment for easier integration.
For how long have I used the solution?
I have been using Amazon API Gateway for about one year.
What do I think about the stability of the solution?
It is stable. I haven't find many issues in the program, so I think it's a stable.
What do I think about the scalability of the solution?
We have many teams working on the solution, between 10 and 50, and there are between 8 and 10 people per team.
How was the initial setup?
The initial setup is easy because you don't have to install anything. It's cloud. It is in a base mode, so to start working with that the setup is really easy.
Which other solutions did I evaluate?
I was looking for information regarding AWS API gateway and MuleSoft because I am looking for some different arguments to put on the table for a comparative for a customer. In my opinion MuleSoft is a tool that lets you to manage all the life cycles for the API. I think it's a more complete solution. In AWS you don't have the capabilities to manage all the life cycle for the API's. Also you don't have other capabilities for implementing different integration patterns. I think that's the main difference that I found between these tools.
What other advice do I have?
The advice that I would give others regarding Amazon API is that it depends on the use cases. If they have a complex environment, they need to consider different integration patterns. It could be that AWS Management is not enough for them. They would have to compliment it with another solution. It is really working in some cases, but you do need to evaluate all the requirements to choose the tool. If you are working only in the AWS context with different services or something like that, it's really useful to work with AWS Management.
On a scale of one to ten I would rate Amazon API Gateway an eight.
Which deployment model are you using for this solution?
Public Cloud
Disclosure: My company has a business relationship with this vendor other than being a customer. partner
API Application Security Specialist
A scalable solution with End-to-end protection for your service, and ties in well with the AWS ecosystem
Pros and Cons
- "This solution gives you a unified way to have your API accessed."
- "The only real problem is that you have to know a lot about what is outside of the API gateway in order to make the best use of it."
What is our primary use case?
We are currently using this solution in a project that we are implementing for a public service organization. It is a content management system that will be able to do things like rate monitoring. The service will have good security and availability.
This is a cloud-based deployment with Lambda Integration.
How has it helped my organization?
This solution gives you end-to-end protection in what you're able to do. This includes a certificate base, TLS from endpoints, and you can protect the whole link. It will generate certificate keys for you.
What is most valuable?
This solution gives you a unified way to have your API accessed.
It's a managed product and is fully scalable.
This solution ties in very well with all of the AWS services, such as IAM and asset management. It gives you security from an authentication and authorization point of view.
Lambda integration and functionality is very good.
This solution ties directly in with the AWS firewall, which gives you a lot of security, including application security in terms of things like SQL injection and cross-site scripting.
What needs improvement?
One of the problems with using this solution is that you have to know a lot about the Amazon ecosystem, in terms of services, to be able to use it. For example, if you use it without the Web Application Firewall then you're going to get some attacks. You have to read the documentation and learn how to use it.
This is a very large product, which means that there is a lot to learn and a lot of documentation to read.
It is not clear to us how you create a direct connection between your on-premises network and the API gateway. In the documentation, it tells you to create a VPN, but I find this troubling at the application level. You should be able to use MTLS. This is what you want rather than direct connect because of security issues. I don't think that this is a documentation issue. Rather, I think that it is a feature that can be improved.
For how long have I used the solution?
I have been using this solution in our current project for about nine months.
What do I think about the stability of the solution?
This solution is stable. We will not know for sure until we get into production, but our tests show that stability is fine.
What do I think about the scalability of the solution?
The scalability is excellent, given that it is AWS and not a third-party solution.
We have not fully deployed yet, so we have not had to scale, but scalability is well documented.
How are customer service and technical support?
I have not contacted technical support personally. Some of my colleagues have, but not about this solution specifically. We do have people that speak with Amazon at times.
How was the initial setup?
The setup of this solution is well documented and examples are provided. I won't say that it is very easy, but you can do it. There are some things that involve creating custom rules, which is not easy. I'm not sure if it can be made easier or not.
What about the implementation team?
We have a good team to handle the implemenation and deployment. Most of our people are pretty technical.
Which other solutions did I evaluate?
This solution does more for you than a product like Kong.
What other advice do I have?
I have heard complaints that people say this product does not have good security, but that is not true. There is an expectation that you can use it with other Amazon services to provide security, as well as other functionality.
This is a great product. It has ease of use and a full breadth of functionality. I would say that the Amazon platform, in my view, is the best compared to third-party products.
The only real problem is that you have to know a lot about what is outside of the API gateway in order to make the best use of it.
I would rate this solution an eight out of ten.
Disclosure: My company does not have a business relationship with this vendor other than being a customer.
Engineer at a renewables & environment company with 501-1,000 employees
An affordable solution with an easy initial setup process
Pros and Cons
- "The solution is stable."
- "Its performance and scalability could be better compared to one of its competitors."
What is our primary use case?
We use the solution to protect APIs from malicious attacks.
What needs improvement?
The solution's performance and scalability could be better than Azure.
For how long have I used the solution?
We have been using the solution for two years.
What do I think about the stability of the solution?
The solution is stable.
What do I think about the scalability of the solution?
The solution is scalable.
Which solution did I use previously and why did I switch?
How was the initial setup?
The solution's initial setup process is straightforward.
What's my experience with pricing, setup cost, and licensing?
The solution's price is reasonable.
What other advice do I have?
I rate the solution a nine out of ten.
If public cloud, private cloud, or hybrid cloud, which cloud provider do you use?
Amazon Web Services (AWS)
Disclosure: My company does not have a business relationship with this vendor other than being a customer.

Buyer's Guide
Download our free Amazon API Gateway Report and get advice and tips from experienced pros
sharing their opinions.
Updated: October 2025
Product Categories
API ManagementPopular Comparisons
Microsoft Azure API Management
webMethods.io
IBM API Connect
Kong Gateway Enterprise
MuleSoft API Manager
IBM DataPower Gateway
WSO2 API Manager
Apache APISIX
Layer7 API Management
3scale API Management
Traefik Enterprise
Axway AMPLIFY API Management
SwaggerHub
Buyer's Guide
Download our free Amazon API Gateway Report and get advice and tips from experienced pros
sharing their opinions.
Quick Links
Learn More: Questions:
- Which is better - Apigee or Amazon API Gateway?
- How does Microsoft Azure API Management compare with Amazon API Gateway?
- How does Amazon API Gateway compare with Mulesoft Anypoint API Manager?
- How does Mulesoft Anypoint API Manager compare with Amazon API Gateway?
- Which is better - Azure API Management or Amazon API Gateway?
- Which solution is better: AWS API Gateway or Apigee?
- When evaluating API Management, what aspect do you think is the most important to look for?
- What is the difference between an API Gateway and ESB?
- In a Digital Banking Environment how do we see the role of ESB/ API Managers?
- What is an API Gateway?