Скачать или смотреть How To Authenticate AWS API Using IAM (3 Min) | Http API IAM Authorizer

In this tutorial, you'll learn how to authenticate AWS HTTP API using IAM Authorizer.

—
Facebook:   / gokcedbsql  
—
Video Transcript:
—
Hi guys, this is Abhi from Gokcedb. In this video, you are going to learn how to add an IAM Authorizer to an HTTP API in AWS. Let’s start by going to the AWS Console and searching for Lambda.

Click on Create Function and give your function a name. I’m going to select Python for runtime and create a New Rule with basic permissions for the Default Execution Role. Next, in the Code Source Function, click on the Test Button and give your Test Event a name.

Hit save and test your test again to test your Lambda function. Seems like our function is working as expected. Now, go back to AWS Console, and this time search for API Gateway.

Click in build on the HTTP API section then hit the Add Integration button. Choose Lambda from the dropdown and select the Lambda function that we just created. Give your API a name then hit next.

I‘m going to select the Get Method and leave everything else to default. Hit next, then click on create. Copy the invoke URL and paste it into the postman UI.

Add the route and the end of the URL then hit send. Looks like our API endpoint is in walking our Lambda function as expected. Next click on the Authorization link in the left menu then selects Get.

From the dropdown select, IAM then clicks on the Attached Authorizer Button. Go back to the postman UI and hit send again. This time, we see the forbidden message.

Here’s how we fix this. Go back to the AWS Console and search for IAM. Click on Users in the left menu then hit add users.

Give your user a name then selects Programmatic Access. Next click on Attached Existing Policies Directly and search for API Gateway. Choose API to invoke full access then hit next.

Click on create a user and now you will have access to the id and the access key. in the postman UI, click on the authorization tab, and from the dropdown select AWS Signature. Copy pastes the access id and secret key and enters an appropriate AWS Region.

In the service name text box, type in execute dash API. Now if you hit send again, you should be able to access your Lambda Function from this API Endpoint as expected. There you have it.

Make sure you like, subscribe, and turn on the notification bell. Until next time.