Summary
API gateways are the standard enforcement point for rate limiting; rate limiting rules configured on the gateway apply uniformly to all callers without code changes in downstream services.
Evidence
- ·rate_limiting implementation_notes: prefer the gateway's built-in rate limiting (Kong, Envoy, AWS API Gateway, NGINX) when a gateway is in the architecture; lists api_gateway in related_patterns (patterns/rate_limiting.yaml)
- ·api_gateway enforces rate limits (e.g. 1,000 req/min per API key from a Redis counter) uniformly across endpoints (patterns/api_gateway.yaml)
Evidence grounding
Grounded, 2 supporting itemsThe API gateway is the canonical enforcement point for rate-limiting rules.