Which AWS service enables you to create, publish, maintain, monitor, and secure REST, HTTP, and WebSocket APIs at any scale?

• A. AWS IoT Core
• B. Amazon API Gateway
• C. Amazon Pinpoint
• D. AWS Amplify

Answer: (B)

APIs that can grow to any scale while staying secure and observable are best handled by a dedicated API management service. Amazon API Gateway is a fully managed service that lets you create, publish, maintain, monitor, and secure REST, HTTP, and WebSocket APIs at any scale. It supports multiple API types—REST APIs, HTTP APIs, and WebSocket APIs—so you can choose the most cost-effective and capable option for your use case, all under one managed platform.

Security and access control are built in. API Gateway works with IAM and resource policies, and it supports custom authorizers and JWT-based authorization to control who can access what. You can enforce quotas and throttling with usage plans and API keys to protect backends. For observability, it integrates with CloudWatch for metrics, logs, and alarms, and can work with tracing if you use it with Lambda or other services.

In terms of integration and deployment, API Gateway can front Lambda functions, HTTP backends, or AWS services directly, and it supports features like request/response transformation, caching, custom domain names, and deployment stages (such as dev, staging, prod). It also provides edge protection and performance benefits via integration with CloudFront and WAF.

Other services listed serve different purposes: IoT Core is for device messaging and IoT workloads; Pinpoint focuses on customer engagement messaging and analytics; Amplify is for frontend app development hosting and full-stack app workflows. This is why API Gateway is the best fit for creating, publishing, maintaining, monitoring, and securing APIs at scale.