Secure API Gateway with a Lambda authorizer - Implementing a custom authorizer
HTML-код
- Опубликовано: 25 авг 2024
- A Lambda authorizer (or custom authorizer) is an API Gateway feature that uses a Lambda function to control access to your API. You can use this to implement a custom authorization scheme.
With this when a request comes in to the API the API Gateway will first call the authorizer and checks if the token is valid and then it returns an IAM policy which either allows or denies the request.
This video guides you step by step on how to create the authorizer and what should be in the actual code. There is also an associated Github repo where you can find the full source code together with an AWS SAM template which you can deploy just by running "sam deploy --guided". The repo is here: github.com/maj...
There is also an older video in which I show you how to use a Cognito authorizer if you're interested: • Secure the AWS API Gat...
If you liked this video please click on the like button! There's a new video on Majestic.cloud once a week so if you want to stay updated and don't want to miss any new videos then please subscribe to the channel!
Visit the site: majestic.cloud
Follow me on Twitter:
/ lacisoft (László)
/ cloud_majestic (Majestic.cloud)
Follow on Facebook: / majesticcloudcomputing
It worked fine with Postman or other api testers but cors error from frontend. please
Excelent video!
When adding custom domain choosing edge optimize it say not found. Do i have to create custom cloud front distribution and add Authorizer also a CNAME? or is there a work around with default edge optimization?
How can i have similar authoriser for Websocket API on API GW?