API Gateway API Keys and Usage Plans | Serverless Security

In this video I show you how to set up API Keys and Usage Plans for API Gateway APIs using AWS SAM and CloudFormation as infrastructure as code.

★★ README / OPEN ME ★★

☆☆ ABOUT THIS VIDEO ☆☆
This is another video in this series of API Gateway security mechanisms.

In this video, I show you how to set up API Keys and Usage Plans for API Gateway APIs using AWS SAM and CloudFormation as infrastructure as code.

☆☆ FOLLOW ME ONLINE ☆☆

📷Instagram: foobar_codes

☆☆ ABOUT FOOBAR ☆☆
In this channel, you can find mostly coding tutorials related to cloud and serverless.
In addition, I like also talking about architecture, software design, motivation, and leadership.
There is a new video every Tuesday, so stay tuned :)
.....

[MarkFreedmanNY]

You saved me big time today. This is the only place I was able to find proper SAM examples of how to set this up. The documentation takes us all over the map, and most questions/answers on SO are very outdated. Thanks!

[VishalRaoOnYouTube]

Do multiple customers purchasing the same usage plan get the same API Key? If so, how do you charge them the correct amount? Or does AWS issue a new API key for each customer purchase of a usage plan? Good video, but I would appreciate an additional more detailed video on how customers purchase and use the same usage plan of an API. Thanks.

[mayurchoksi]

Good Content. Had a question though. I need to get an API key created when a customer registers as a consumer of my API. I may need need 1000s of APIKeys where each key is associated to one of the predefined (about 4) usage plans

[pradeep_kumar_ind]

Could you help me understand where is aws-sam in your repository? The deploy script is failing due to this. The ZIP file of the code you have linked here also does not contain aws-sam folder as shown in the video.

[codingexpedition]

Is the API key and usage plan always defined on stage level or can you also do it on a per method and per endpoint level?

[taolin]

If my customer 's api key has been stolen in the middle of month, I have to generate another API key to him. What happen with the apiKey usage? How can I apply the old key's usage to the new key as they all belong to the same customer?