Is it possible to use sequence: Cognito Authorizer and Lambda Athorizer?

0

I have a NET 6 Web REST API service deployed as Lambda and works with RDS PostgreSQL database.

What do you think about my idea? It is:

  1. Create User pool
  2. Declare Cognito Authorizer in AWS Gateway ("allow" or "deny")
  3. If its response is "Allow" then use my Lambda Custom authorizer: email+password stored in my database, return a role: User, Power User, Admin, Superadmin.
2 Risposte
1

Hi Oleg :)

I think this answer outlines well the options for role based authorizations: https://repost.aws/questions/QUpYtLZR5wQVqOSWI4BcblQQ/rbac-for-api-gateway-endpoints-using-cognito-user-groups.

Hope it helps

profile picture
ESPERTO
con risposta un anno fa
0

Hi, @Oleg.

I understand that "AWS Gateway" is "API Gateway".

You cannot set multiple authorizers in combination in API Gateway.
So you have to implement your custom logic in the Lambda authorizer.

Validate Cognito's JWT in Lambda and check for the target user pool. Then perform custom processing.
The following documents may be helpful.

https://github.com/aws-samples/amazon-cognito-api-gateway

profile picture
ESPERTO
iwasa
con risposta un anno fa

Accesso non effettuato. Accedi per postare una risposta.

Una buona risposta soddisfa chiaramente la domanda, fornisce un feedback costruttivo e incoraggia la crescita professionale del richiedente.

Linee guida per rispondere alle domande