AWS now supports response streaming in API Gateway, allowing REST APIs to send responses progressively. This reduces wait times, improves user experience in applications like AI chatbots, and handles larger payloads more efficiently.

Misconfigured AWS Private API Gateways can be exploited by attackers from external AWS accounts due to overly permissive resource-based policies. This vulnerability allows them to access internal resources and potentially launch further attacks, emphasizing the need for strict policy configurations and monitoring. Proper security measures, such as limiting access to specific VPCs and implementing API authentication, are crucial to protect against these threats.