The number of APIs has been increasing year-over-year, as they’re the infrastructure that makes the majority of modern digital architecture possible. Given that everything from AI to SaaS involves APIs at their core, it’s not the greatest shock that 78% of organizations don’t even know how many APIs they manage. A report from F5 finds ...
#api gateway
11 posts
9 Jun
2 Jun
A developer can ship an MCP server in an afternoon. Getting that same server running in regulated production, with credentials provisioned, access controls enforced, and security sign-off obtained, takes weeks. This post walks through the six challenges teams hit when scaling enterprise MCP deployments from prototype to production, the fix for each, a posture assessment ...
28 May
Often, enterprises end up treating all their APIs roughly the same. They’re authenticated, maybe rate-limited, and hopefully behind a gateway, but ultimately, they’re lumped together as part of a collection of APIs. While that flatness makes sense from a product management perspective, it poses a problem for risk management. A payment processing API and a ...
18 Feb
As APIs scale and organizations structure complex systems, it’s almost inevitable that some enterprises are going to end up with more than one API gateway. Sometimes this is intentional — especially when those gateways represent different environments, segmented data services across regions, or different teams and thus different focuses. More often, however, this is just ...
28 Jan
In December 2025, roughly 14,000 Stranger Things fans experienced their worst nightmare. No, Vecna didn’t rise up to pull Hawkins, Indiana, into the Upside Down. Even worse, thousands of fans signed onto Netflix to watch the conclusion of the series they’d dedicated the last decade of their lives to, only to have the world’s largest ...
30 Dec 2025
In the interconnected digital landscape, software applications communicate through layers of application programming interfaces (APIs). For architects responsible for steering large, complex systems, the move to an API-first strategy is no longer optional — it’s the bedrock for delivering resilient, scalable, and innovative digital experiences. This approach ensures that APIs are treated as first-class citizens, ...
17 Dec 2025
Learn how to debug silent failures in AWS API Gateway HTTP when your OIDC provider doesn't implement the .well-known/openid-configuration endpoint. Enable FailOnWarnings to catch these issues before they break your production deployment.
13 Nov 2025
In modern system architectures, understanding data flow is crucial. Two fundamental concepts are north-south and east-west communications. Although both deal with APIs and services, they solve fundamentally different problems and require distinct tools. Below, we’ll explore when to use API gateways or a service mesh for north-south and east-west traffic. We’ll consider when each approach ...
5 Nov 2023
When building a custom API Gateway authorizer, mysterious 500 errors can happen. This post shows how to enable CloudWatch logging for API Gateway to inspect the logs and debug problems.