API Gateway LAMBDA AUTHORIZER (Custom Authorizer) | REST APIs | .NET ON AWS | AWS Serverless

Hey 👋🏽When building serverless APIs with AWS Lambda and API Gateway, one of the most critical questions is how to secure the API.
Lambda Authorizers are a feature provided by API Gateway that helps us separate the authentication logic from our business logic in our function code.

In this video, we will learn about Lambda Authorizers in Amazon API Gateway, how to build one using .NET and how to set it up with API Endpoints. We will look into the different types of custom authorizers, how to cache authorizer responses, and also how to pass data from the authorizer to our Functions containing business logic.

This video is sponsored by AWS and is part of the .NET on AWS Series.

00:00 - Introduction
03:51 - Lambda Authorizer
04:43 - Adding Lambda Function
09:49 - Setup API Lambda Authorizer
13:08 - Validate Request Headers
15:41 - Validate Token In Lamda Function
23:52 - Test Authorizer
25:10 - Authorize POST Endpoint
27:09 - Caching
29:45 - Caching & Policy Conflicts
32:18 - Context Parameters
37:34 - Request Authorizer Type
41:53 - Conclusion

Additional Watching

Come say hi! ✋

[shivangigarambha]

Great video. Everything related to the custom authorizer is explained in detail with the demo.

[MarianoGomezBidondo]

Hi raul, as always, your videos are impeccable. They last long enough to include all the dirty details that often are what make something work or not. Congratulations!

[proxima]

Thank you. This is exactly what I was looking for

[pardhasaradhivasamsetty]

Hi Rahul, I have been following your videos and they are awesome. Gaining good knowledge and they are vary useful. Thank you.

[rahulsalunke]

Great knowledge article Rahul, thanks for sharing it

[rahulsalunke]

Do you believe that lambda authoriser along with a lambda for business code would double the cold start issue? Any workaround if you can suggest would be helpful

[dailytech]

Hey Rahul, once again awesome video, enough content

[andrescastillo]

Hello, thanks for your videos, Can I use the api keys from the api gateway plus a custom authorizer?

One is for the web app and the custom authorizer for the JWT validation.

When I add the custom authorizer it does not need the api key anymore.

[vinayakshettar]

Hi rahul great video cheers .. Can I pass token from authorizer to lambda?

[markosea]

Can a Lambda authorizer work with scopes? Like, don't authorize the request if the scope doesn't match the allowed scope for a resource?

[OvRaf]

For Http API gateway I ran into issue when $request.header.Authorization from "Identity Source" is not passed to request.AuthorizationToken of request object.

In postman I setup header (base64 basic auth)
"Authorization": "Basic

In Authorizer settings on aws portal I have $request.header.Authorization

Appreciate any hint

[TechPisat]

Hi its great video,
Can any one from your side create API for my RDS?

[cloud_architector]

Hi, would be nice to see Cognito example. Thank you

[SS-hpop]

Is it possible to use lambda authorizer with fargate based API gateway?

[cloud_architector]

Hi, missed your videos for some time, now I see you did a course, usually I buy for 10-12$
Can you make a coupon code for this price?