-
Informational use only: This document is provided for informational purposes to help you plan, configure, and operate an API Gateway in a cloud environment. It is not a contract, specification of record, or a commitment to deliver features. Your use of the service is governed solely by your applicable agreement, service terms, and policies.
-
Subject to change: Features, limits, APIs, behaviors, defaults, and compatibility may change without notice. Always consult the latest release notes, service console, and API references before deployment.
-
No warranties: While efforts are made to ensure accuracy, this document is provided “as is” and may contain errors or omissions. It does not constitute legal, regulatory, security, or architectural advice.
-
Environment variability: Performance, latency, throughput, availability, and scaling behavior depend on your workload characteristics, configuration (e.g., caching, TLS, authentication), network conditions, region, and service tier. Test in a non-production environment and validate assumptions before go-live.
-
Security responsibilities: You are responsible for secure configuration, credential and key management, certificate lifecycle, network access controls, logging, monitoring, backup, and incident response. Documentation examples may omit security hardening, error handling, retries, rate limiting, timeouts, or input validation.
-
Compliance and data protection: References to standards (e.g., GDPR, HIPAA, PCI DSS, ISO/IEC) are informational. Using an API Gateway does not by itself achieve compliance. You must assess regulatory requirements, data classification, encryption, retention, masking, and data residency, and configure controls accordingly. Consult your legal and compliance advisors.
-
Data handling and logging: API Gateway operation may generate logs, metrics, traces, and metadata that can include request details or identifiers. You control what is collected, retained, exported, or masked. Review privacy policies and configure telemetry to meet your requirements.
-
Regional and service availability: Features, limits, and integrations may not be available in all regions or clouds. Behavior may vary by region or provider. Verify service availability and constraints for your target regions.
-
Third-party dependencies: Integrations with identity providers, certificate authorities, DNS, CDNs, observability backends, or other external systems are subject to those providers’ terms, availability, security, and changes. Compatibility can change and is outside the control of the API Gateway vendor.
-
Examples and sample code: Configuration snippets and code samples are illustrative and not production-ready. Do not reuse placeholder values or credentials. Review, adapt, and test samples to meet your operational, security, and performance requirements.
-
Rate limits, quotas, and throttling: Enforcement policies may apply at various layers (per key, per route, per region, per account). Published limits are subject to change and may differ by tier. Exceeding limits can result in throttling or errors.
-
Billing and costs: Usage (e.g., requests, data transfer, logging, private connectivity) may incur charges. Examples and tests can generate billable activity. Pricing, discounts, and billing behavior are governed by your agreement and published pricing, not this document.
-
Service levels and support: Any service-level commitments, credits, and support obligations are defined exclusively in your SLA and support terms. This document does not create or modify SLAs.
-
Preview and beta features: Preview/beta features are provided for evaluation, may have limited documentation or support, can change or be removed, and are not recommended for production unless explicitly stated in your agreement.
-
High-risk use: Unless expressly permitted in your agreement, do not use the service in hazardous or mission-critical environments where failure could lead to death, personal injury, or severe property or environmental damage.
-
Export controls and sanctions: Access to and use of the service may be subject to export control, sanctions, or similar restrictions. You are responsible for compliance with applicable laws.
-
Intellectual property: Product and company names mentioned may be trademarks of their respective owners. Their inclusion does not imply endorsement.
-
Feedback and roadmap: Feedback on this documentation is welcome. However, forward-looking statements or roadmap information are not commitments and may change.
For binding terms, consult your master agreement, service terms, privacy policy, acceptable use policy, and SLA. If you have questions about compliance or legal obligations, seek advice from qualified counsel.
