Usage Plan / Rate limit / x-api-key

0

We currently require x-api-key header to be passed. This is how we control usage plan and limit
One customer of ours said that they cannot pass header parameters and they can only do urlencoded form parameters.

My question is how can we enforce usage plan / limiting if x-api-key will be coming from form parameters?

3 réponses
1

Hello:

You can provide the key as the result of a lambda authorizer which will have access to headers, url parameters and query string, but not body parameters.

https://docs.aws.amazon.com/apigateway/latest/developerguide/api-gateway-api-key-source.html

Regards,
Bob

EXPERT
répondu il y a 5 ans
1

Hello:

Unfortunately there isn't currently an option that would support your use case. Apologies for the inconvenience.

Regards,
Bob

EXPERT
répondu il y a 5 ans
0

Bob,

Thank you for taking time to reply.

I am the same person asking on this thread: https://forums.aws.amazon.com/thread.jspa?messageID=887871&#887871

I could have asked both my questions in one thread but they are not related so I created a thread for each of my question.

so based on this: https://forums.aws.amazon.com/thread.jspa?messageID=887871&#887871

I will be doing authorization in the Integration level... meaning I won't be having the Authorizer configured anymore
how am I going to enforce x-api-key without an authorizer?

répondu il y a 5 ans

Vous n'êtes pas connecté. Se connecter pour publier une réponse.

Une bonne réponse répond clairement à la question, contient des commentaires constructifs et encourage le développement professionnel de la personne qui pose la question.

Instructions pour répondre aux questions