Can I use API Gateway cache invalidation with a custom authorizer ?

1

I use API Gateway with a custom authorizer to authorize http requests based on a JWT Bearer token (header Authorization: Bearer <jwt>). I activated the cache layer and I would like to invalidate the cache entry on specific resource when the resource has been modified.

With an IAM authorizer, I was able to test the cache invalidation mecanism described in this documentation https://docs.aws.amazon.com/apigateway/latest/developerguide/api-gateway-caching.html#override-api-gateway-stage-cache-for-method-cache . I used a lambda function to call the API Gateway assuming a role with the proper policy "execute-api:InvalidateCache".

The problem is that I want a use a custom authorizer instead of the IAM authorizer and it does not seem to be possible. I tried to return the policy "execute-api:InvalidateCache" from my custom authorizer but the API Gateway does not authorize the cache invalidation.

Could you tell me if I am missing something or is it just not supported ?

preguntada hace 2 años1833 visualizaciones
1 Respuesta
1

Hello,

Thanks for reaching out to us!

At the moment only AWS_IAM authorization on the same-account supports cache invalidation.

If you use API Gateway with Lambda authorizers it does not support cache invalidation at the moment.

AWS
INGENIERO DE SOPORTE
Tim_P
respondido hace 2 años
  • Greetings Tim P,

    We are attempting to address the same concern but are encountering a similar problem. Have there been any recent updates that provide support for cache invalidation in the context of AWS API Gateway when using Lambda authorizers?

No has iniciado sesión. Iniciar sesión para publicar una respuesta.

Una buena respuesta responde claramente a la pregunta, proporciona comentarios constructivos y fomenta el crecimiento profesional en la persona que hace la pregunta.

Pautas para responder preguntas