---
title: "Comment by Sebastian M on \"API Gateway REST vs. HTTP API: What Are The Differences?\" | Hashnode"
description: "Thanks! Great article! There is another difference that you mentioned, and I was wondering if you didn't mention because you use other alternative: REST API"
url: "https://hashnode.com/posts/aws-api-gateway-rest-http/61f81e4f66fcfc728be1cc14/comment/623cf555b6813c8a18c20f64"
---

[Discussion](https://hashnode.com/posts/aws-api-gateway-rest-http/61f81e4f66fcfc728be1cc14)

Comment [API Gateway REST vs. HTTP API: What Are The Differences?](https://hashnode.com/posts/aws-api-gateway-rest-http/61f81e4f66fcfc728be1cc14)

[Sebastian M](https://hashnode.com/@SebastianM77)

[Mar 24, 2022](https://hashnode.com/posts/aws-api-gateway-rest-http/61f81e4f66fcfc728be1cc14/comment/623cf555b6813c8a18c20f64)

Thanks! Great article! There is another difference that you mentioned, and I was wondering if you didn't mention because you use other alternative: REST APIs enable the ability to use an API key for enhanced security....does it sound a good feature, or you don't use it at all? Thanks!

[Jay Allen](https://hashnode.com/@jayallen)

[Mar 24, 2022](https://hashnode.com/posts/aws-api-gateway-rest-http/61f81e4f66fcfc728be1cc14/comment/623cf555b6813c8a18c20f64#reply-623cffa72209c88a3de8eee2)

That's a good point! I personally don't tend to use API keys because they can be implemented in a lazy and insecure manner (e.g., plain text GET query strings). So I tend to prefer OAuth for added security.