A Lambda authorizer (formerly known as a custom authorizer) is an API Gateway feature that uses a Lambda function to control access to your API.

A Lambda authorizer is useful if you want to implement a custom authorization scheme that uses a bearer token authentication strategy such as OAuth or SAML, or that uses request parameters to determine the caller's identity.

When a client makes a request to one of your API's methods, API Gateway calls your Lambda authorizer, which takes the caller's identity as input and returns an IAM policy as output.

There are two types of Lambda authorizers:

A token-based Lambda authorizer (also called a TOKEN authorizer) receives the caller's identity in a bearer token, such as a JSON Web Token (JWT) or an OAuth token. For an example application, see Open Banking Brazil - Authorization Samples on GitHub.

A request parameter-based Lambda authorizer (also called a REQUEST authorizer) receives the caller's identity in a combination of headers, query string parameters, stageVariables, and $context variables.

For WebSocket APIs, only request parameter-based authorizers are supported.

It is possible to use an AWS Lambda function from an AWS account that is different from the one in which you created your API. For more information, see Configure a cross-account Lambda authorizer.

[AWS] Lambda 란

기본 개념

AWS에서 제공하는 서버리스 컴퓨팅 서비스
기본적으로 이벤트 드라이븐 방식으로 동작
API Gateway와 Elastic Load Balancer가 받은 요청을 기반으 …

기본 개념

서버가 없는 백엔드라는 뜻이 아니라, 직접 서버를 관리하지 않아도 되는 백앤드 (Backend without server MGMT)
서버리스에서는 백엔드 …

woogiereal-blog

Other articles

[AWS] Lambda 란

기본 개념

[AWS] 서버리스 란

기본 개념

Other articles

기본 개념

기본 개념

links

social