Master IAM Authorization: Lambda, API Gateway, and Signature V4 in Action

Here I have shown Lambda function creation, API creation, Route Creation, attaching routes with corresponding lambda functions, associating IAM auth with routes, User group creation, User creation, Policy creation and passing signature version 4 token in postman to test authorization of these routes. Below are the steps:

STEPS:
-------------------------------------------------

1) Create two lambda functions for handling two routes
2) In API Gateway - Create two routes like /helloadmin and /hellouser with GET method
3) Attach both routes with corresponding lambda functions
4) Attach each route with IAM auth for authorization
5) In IAM - Create two groups say Admin and Client
6) Create two users named as admin_user and client_user under corresponding groups
7) Create in line policy for both groups
The admin_user should be able to access only /helloadmin NOT /hellouser
The client_user should be able to access only /hellouser NOT /helloadmin
8) Add authorization header in POSTMAN [SignatureV4]
a) Find accesskey, secretkey, sessionToken of both users
b) Pass these values in Authorization tab in POSTMAN
9) After Testing delete all Policies, Users, Groups, IAM APIs, Lambda functions

Advanced Node JS:    • Advanced NodeJS  

Node JS Express Tutorial:    • Node.js Training