SAA-C03 Q275 · Serverless

Question

A company runs an application on Amazon EC2 instances behind an Application Load Balancer (ALB). The company wants to create a public API for the application that uses JSON Web Tokens (JWT) for authentication. The company wants the API to integrate directly with the ALB. Which solution will meet these requirements?

Accepted Answer

**Amazon API Gateway HTTP API** meets both requirements:

1. **JWT Authentication**: HTTP API has a **built-in JWT authorizer**. This is a native, first-class feature — you simply configure the issuer URL and audience, and API Gateway validates JWTs automatically without any custom code or Lambda authorizers.

2. **Direct ALB Integration**: HTTP API supports **private integrations** via AWS Cloud Map or direct ALB/NLB integration using VPC links. You can route requests directly from the HTTP API to the ALB target.

**Why HTTP API specifically?**
- HTTP API (also called API Gateway v2) was designed to be a simpler, faster, and cheaper alternative to REST API.
- The built-in JWT authorizer is **exclusive to HTTP API** — REST API does NOT have this native feature.
- HTTP API supports ALB as a

📖 Explanation

✅ Correct Answer

❌ Wrong Answers

📘 Key Concepts

🏗️ Architecture

⚙️ Operations

💰 Cost

🔒 Security

🎯 Exam Tips