How to restrict access from invoking API URL?

Question

As shown above one of my lambda function HelloCloudGurus which trigger by API gateway and it can be triggered by the API link as below:

https://APIServiceID.execute-api.ap-southeast-1.amazonaws.com/prod/HelloCloudGurus

When I click on the link it shows that I can still access the link despite the Authorization has been set to AWS_IAM?

How to configure it so that it will validate signature on request and return me something like below?

{"message":"Missing Authentication Token"}

Did you remember to deploy the API?

Michael - sqlbot
– Michael - sqlbot

2017-09-19 03:22:34 +00:00
Commented Sep 19, 2017 at 3:22 — Michael - sqlbot
– Michael - sqlbot, Commented Sep 19, 2017 at 3:22

Vijayanath Viswanathan · Accepted Answer · 2017-09-19 09:56:58Z

2

Please use Cognito. You can still acheive it by API Gateway Custom Authorizer but Cognito is the right candidate for security. Have a read on below AWS documentation for custom authorizer,

http://docs.aws.amazon.com/apigateway/latest/developerguide/use-custom-authorizer.html

answered Sep 19, 2017 at 9:56

Vijayanath Viswanathan

8,6713 gold badges31 silver badges50 bronze badges

Sign up to request clarification or add additional context in comments.

Collectives™ on Stack Overflow

How to restrict access from invoking API URL?

1 Answer 1

Comments

Your Answer

Hot Network Questions

Collectives™ on Stack Overflow

1 Answer 1

Comments

Your Answer

Sign up or log in

Post as a guest

Related