awslabs avatar

Api Gateway

This walks you through building APIs on AWS API Gateway with a clear focus on choosing between REST, HTTP, and WebSocket types first. The decision table is genuinely helpful: REST API gives you the full enterprise controls (usage plans, caching, WAF, private endpoints) at higher cost, HTTP API cuts price by 70% but strips out most management features and locks you to a 30 second timeout, and WebSocket handles bidirectional connections. The skill covers IaC templates, auth patterns (Lambda authorizers, JWT, Cognito), and common gotchas like CORS failures and timeout limits. It's practical if you're tired of piecing together API Gateway's sprawling feature set from AWS docs.

GitHub stars
783
last updated
Jun 11, 2026

Install

$ npx -y skills add awslabs/agent-plugins --skill api-gateway --agent claude-code

Installs into .claude/skills of the current project.

Files

Amazon API Gateway Development

Expert guidance for building, managing, governing, and operating APIs with Amazon API Gateway. Covers REST APIs (v1), HTTP APIs (v2), and WebSocket APIs.

How to Use This Skill

When answering API Gateway questions:

  1. Read the relevant reference file(s) before responding, do not rely solely on this summary
  2. For tasks spanning multiple concerns (e.g., "private API with mTLS and custom domain"), read all relevant references
  3. When the user needs IaC templates, consult references/sam-cloudformation.md or references/sam-service-integrations.md and provide complete, working SAM/CloudFormation YAML
  4. Always mention relevant pitfalls and limits that affect the user's design

Quick Decision: Which API Type?

Choose the right API type first. This decision affects every downstream choice.

Sponsors

Details

Repository
github.com/awslabs/agent-plugins
Categories
Backend & APIs, AI & Agent Building
License
Apache-2.0
First seen
Jun 11, 2026

More from awslabs/agent-plugins

All 32
1bobmatnyc avatardrizzle-ormbobmatnyc/claude-mpm-skillsType-safe SQL ORM for TypeScript with zero runtime overhead4.3Kskills.sh installs
2firebase avatarfirebase-auth-basicsfirebase/skillsfirebase auth basics1.2Kskills.sh installs
3mindrally avatardrizzle-ormmindrally/skillsGuidelines for developing with Drizzle ORM, a lightweight type-safe TypeScript ORM with SQL-like syntax1.1Kskills.sh installs
4mukul975 avataranalyzing-api-gateway-access-logsmukul975/anthropic-cybersecurity-skillsParses API Gateway access logs (AWS API Gateway, Kong, Nginx) to detect BOLA/IDOR attacks, rate limit bypass, credential scanning, and injection attempts. Uses 782skills.sh installs
5aj-geddes avatarapi-authenticationaj-geddes/useful-ai-promptsImplement secure API authentication with JWT, OAuth 2.0, API keys, and session management. Use when securing APIs, managing tokens, or implementing user authent612skills.sh installs
6yoanbernabeu avatarsupabase-audit-auth-signupyoanbernabeu/supabase-pentest-skillsTest if user signup is open and identify potential abuse vectors in the registration process.495skills.sh installs