HttpAuthorizerProps Struct
Properties to initialize an instance of HttpAuthorizer.
Example
ts
// The code below shows an example of how to instantiate this type.
// The values are placeholders you should change.
import * as cdk from 'aws-cdk-lib';
import { aws_apigatewayv2 as apigatewayv2 } from 'aws-cdk-lib';
import { aws_iam as interfaces_iam } from 'aws-cdk-lib/interfaces';
declare const httpApiRef: apigatewayv2.IHttpApiRef;
declare const roleRef: interfaces_iam.IRoleRef;
const httpAuthorizerProps: apigatewayv2.HttpAuthorizerProps = {
httpApi: httpApiRef,
identitySource: ['identitySource'],
type: apigatewayv2.HttpAuthorizerType.IAM,
// the properties below are optional
authorizerName: 'authorizerName',
authorizerUri: 'authorizerUri',
enableSimpleResponses: false,
jwtAudience: ['jwtAudience'],
jwtIssuer: 'jwtIssuer',
payloadFormatVersion: apigatewayv2.AuthorizerPayloadVersion.VERSION_1_0,
resultsCacheTtl: cdk.Duration.minutes(30),
role: roleRef,
};
Properties
authorizerNamestringauthorizer_namestrauthorizerNameStringAuthorizerNamestringAuthorizerName*string= id of the HttpAuthorizer constru…#Name of the authorizer.
default
Default: id of the HttpAuthorizer construct.
authorizerUristringauthorizer_uristrauthorizerUriStringAuthorizerUristringAuthorizerUri*string= required for Request authorizer …#The authorizer's Uniform Resource Identifier (URI).
For REQUEST authorizers, this must be a well-formed Lambda function URI.
default
Default: required for Request authorizer types
enableSimpleResponsesbooleanenable_simple_responsesboolenableSimpleResponsesBooleanEnableSimpleResponsesboolEnableSimpleResponses*bool= The lambda authorizer must retur…#Specifies whether a Lambda authorizer returns a response in a simple format.
If enabled, the Lambda authorizer can return a boolean value instead of an IAM policy.
default
Default: The lambda authorizer must return an IAM policy as its response
httpApiIHttpApiRefhttp_apiIHttpApiRefhttpApiIHttpApiRefHttpApiIHttpApiRefHttpApiIHttpApiRefrequired#HTTP Api to attach the authorizer to.
identitySourcestring[]identity_sourcetyping.List[str]identitySourceList<String>IdentitySourcestring[]IdentitySource*[]*stringrequired#The identity source for which authorization is requested.
jwtAudiencestring[]jwt_audiencetyping.List[str]jwtAudienceList<String>JwtAudiencestring[]JwtAudience*[]*string= required for JWT authorizer type…#A list of the intended recipients of the JWT.
A valid JWT must provide an aud that matches at least one entry in this list.
default
Default: required for JWT authorizer typess.
jwtIssuerstringjwt_issuerstrjwtIssuerStringJwtIssuerstringJwtIssuer*string= required for JWT authorizer type…#The base domain of the identity provider that issues JWT.
default
Default: required for JWT authorizer types.
payloadFormatVersionAuthorizerPayloadVersionpayload_format_versionAuthorizerPayloadVersionpayloadFormatVersionAuthorizerPayloadVersionPayloadFormatVersionAuthorizerPayloadVersionPayloadFormatVersionAuthorizerPayloadVersion= AuthorizerPayloadVersion.VERSION…#Specifies the format of the payload sent to an HTTP API Lambda authorizer.
default
Default: AuthorizerPayloadVersion.VERSION_2_0 if the authorizer type is HttpAuthorizerType.LAMBDA
resultsCacheTtlDurationresults_cache_ttlDurationresultsCacheTtlDurationResultsCacheTtlDurationResultsCacheTtlDuration= API Gateway will not cache autho…#How long APIGateway should cache the results.
Max 1 hour.
default
Default: API Gateway will not cache authorizer responses
The IAM role that the API Gateway service assumes while invoking the authorizer.
Supported only for REQUEST authorizers.
typeHttpAuthorizerTypetypeHttpAuthorizerTypetypeHttpAuthorizerTypeTypeHttpAuthorizerTypeTypeHttpAuthorizerTyperequired#The type of authorizer.