Is it a good way to implement custom authorization logic(like an API call to validate header parameters) in Lambda Authorizers?

Question

Hi,

I want to add some authorization logic in every API Gateway other than token authentication to secure my APIs. My custom logic includes call an API to validate my header parameters. If the user have that permission it will generate an allow policy. Is it is possible to implement in custom authorizer?
Or is there any other methods available to validate my custom header?

Can we throw custom message from Lambda Authorizer based on our requirement?

Thanks

Answer

Hi.

You can use the header verification function for simple regular expressions.  
If you need custom validation using an external API, I think the Lambda authorizer is a good choice.

What does custom message throw mean? Please tell me the scenario.

Is it a good way to implement custom authorization logic(like an API call to validate header parameters) in Lambda Authorizers?

Conteúdo relevante