BiteSizedChunks.comLearn one small thing at a time.

Course contentsShow

870What is an API Gateway?
871The Single Entry Point Pattern
872API Gateway vs Reverse Proxy
873Request Routing and Aggregation
874Protocol Translation
875Client-Specific API Composition
876API Gateway as a Cross-Cutting Concern Hub
877The API Gateway Bottleneck Risk
878Stateless Gateway Design
879When to Introduce an API Gateway
880Request Routing and Load Balancing
881Protocol Translation
882Request and Response Transformation
883Authentication at the Gateway
884Authorization and Policy Enforcement
885Rate Limiting and Throttling
886Request Validation
887API Composition and Aggregation
888Caching at the Gateway
889Circuit Breaking and Fallbacks
890Logging and Metrics Collection
891SSL/TLS Termination
892API Versioning and Routing
893WebSocket and Long-Polling Support
894Kong Gateway Architecture
895AWS API Gateway and Serverless Integration
896Nginx and OpenResty as API Gateways
897Envoy Proxy for API Management
898Apigee and Enterprise API Management
899Azure API Management Features
900Open-Source vs Managed Gateway Tradeoffs
901Choosing the Right API Gateway Technology
902Backend-for-Frontend (BFF) Pattern Overview
903Why BFF: Client-Specific Requirements
904BFF vs Single Gateway Tradeoffs
905BFF Implementation Patterns
906BFF Ownership and Team Structure
907BFF Anti-Patterns and Pitfalls
908When to Use BFF Pattern

870What is an API Gateway?
871The Single Entry Point Pattern
872API Gateway vs Reverse Proxy
873Request Routing and Aggregation
874Protocol Translation
875Client-Specific API Composition
876API Gateway as a Cross-Cutting Concern Hub
877The API Gateway Bottleneck Risk
878Stateless Gateway Design
879When to Introduce an API Gateway
880Request Routing and Load Balancing
881Protocol Translation
882Request and Response Transformation
883Authentication at the Gateway
884Authorization and Policy Enforcement
885Rate Limiting and Throttling
886Request Validation
887API Composition and Aggregation
888Caching at the Gateway
889Circuit Breaking and Fallbacks
890Logging and Metrics Collection
891SSL/TLS Termination
892API Versioning and Routing
893WebSocket and Long-Polling Support
894Kong Gateway Architecture
895AWS API Gateway and Serverless Integration
896Nginx and OpenResty as API Gateways
897Envoy Proxy for API Management
898Apigee and Enterprise API Management
899Azure API Management Features
900Open-Source vs Managed Gateway Tradeoffs
901Choosing the Right API Gateway Technology
902Backend-for-Frontend (BFF) Pattern Overview
903Why BFF: Client-Specific Requirements
904BFF vs Single Gateway Tradeoffs
905BFF Implementation Patterns
906BFF Ownership and Team Structure
907BFF Anti-Patterns and Pitfalls
908When to Use BFF Pattern

← System Design

Lesson 884 of 1,919·23. API Gateway PatternPro lesson

Authorization and Policy Enforcement

Enforcing access control policies at the gateway based on user roles, scopes, or attributes.

This lesson is for subscribers

You've completed the free preview. Subscribe to unlock every lesson in every course.

See pricing Back to course