hello, I'm trying to use apigateway websocket in chat room. Is it okay to use following usecase? 1. join room . 2. get user's connectionids in chat room from lambda. 3. send messages to users in chat room directly, using posttoconnection in client side. I know I can do this, but I was curious about security perspective. Is it okay to give users(I'm using cognito identity role) IAM policy of execute-api:manageconnection directly?

apigateway websocket using posttoconnection in client side

hello, I'm trying to use apigateway websocket in chat room. Is it okay to use following usecase?

join room .
get user's connectionids in chat room from lambda.
send messages to users in chat room directly, using posttoconnection in client side.

I know I can do this, but I was curious about security perspective. Is it okay to give users(I'm using cognito identity role) IAM policy of execute-api:manageconnection directly?

トピック

サーバーレスフロントエンド Web & モバイルネットワークとコンテンツ配信

タグ

Amazon API Gateway

言語

English

rePost-beginner1

質問済み 1年前457ビュー

2回答

新しい順
投票が多い順
コメントが多い順

これらの回答は役に立ちましたか？コミュニティがあなたの知識を活用できるように、正解に賛成票を投じてください。

承認された回答

Hi,

I would actually avoid using api gateway for websocket purposes as it gets very tricky and manual to set itu p. You need lambda functions, dynamodb to store sessions etc..

I would suggest to take inspiration from serverlessspresso workshop: https://workshop.serverlesscoffee.com/0-introduction/1-overview.html which leverage IOT Core which may be more resilient and better as choice.

Hope it helps ;)

エキスパート

Antonio_Lagrotteria

回答済み 1年前

It does not seem like the right approach. You should send the message to the server and have a Lambda function to send it to the other participant.

エキスパート

Uri

回答済み 1年前

apigateway websocket using posttoconnection in client side

関連するコンテンツ