From the course: Complete Guide to Serverless Web App Development on AWS

Unlock this course with a free trial

Join today to access over 24,600 courses taught by industry experts.

API gateway authorizers

API gateway authorizers

- [Instructor] Let's explore how AWS API gateway can help you to secure access to your APIs. API gateway authorizers are mechanisms that validate incoming requests before they reach your backend. They enable authentication, and in some cases, authorization, adding an essential layer of security. As you learn in the video about API gateway, there are two versions, REST APIs and HTTP APIs. Each supports a distinct set of authorizers, which we will cover in detail. REST APIs provides flexibility with a variety of authorizers. Here are the main options. Let's just start with the IAM authorizers, which these authorizers, the request must be signed with an AWS Signature V4, and only IAM users roles or federator identities with the appropriate policies can call the API. The benefits of using these authorizers are the robust policy-based control and that you can only apply permissions at the API or individual method level. IAM authorizers are ideal for securing internal APIs that are…

Contents