Can I use API Gateway cache invalidation with a custom authorizer ?

1

I use API Gateway with a custom authorizer to authorize http requests based on a JWT Bearer token (header Authorization: Bearer <jwt>). I activated the cache layer and I would like to invalidate the cache entry on specific resource when the resource has been modified.

With an IAM authorizer, I was able to test the cache invalidation mecanism described in this documentation https://docs.aws.amazon.com/apigateway/latest/developerguide/api-gateway-caching.html#override-api-gateway-stage-cache-for-method-cache . I used a lambda function to call the API Gateway assuming a role with the proper policy "execute-api:InvalidateCache".

The problem is that I want a use a custom authorizer instead of the IAM authorizer and it does not seem to be possible. I tried to return the policy "execute-api:InvalidateCache" from my custom authorizer but the API Gateway does not authorize the cache invalidation.

Could you tell me if I am missing something or is it just not supported ?

已提問 2 年前檢視次數 1833 次
1 個回答
1

Hello,

Thanks for reaching out to us!

At the moment only AWS_IAM authorization on the same-account supports cache invalidation.

If you use API Gateway with Lambda authorizers it does not support cache invalidation at the moment.

AWS
支援工程師
Tim_P
已回答 2 年前
  • Greetings Tim P,

    We are attempting to address the same concern but are encountering a similar problem. Have there been any recent updates that provide support for cache invalidation in the context of AWS API Gateway when using Lambda authorizers?

您尚未登入。 登入 去張貼答案。

一個好的回答可以清楚地回答問題並提供建設性的意見回饋,同時有助於提問者的專業成長。

回答問題指南