aws / aws/aws-appsync-community

Feature Request - Cross account lambda authorizers

Open
#197 1 comment 3 reactions 0 assignees View on GitHub
feature-request
Dominant language
HTML
Stars
507
Forks
37
PR merge metrics
No merged PRs in 30d

Description

We currently have one account that handles all API/GQL authorization for our apps and our apps all live in their own accounts. We started creating new app sync projects in new accounts and would like to be able to use the same lambda auth from an external account for lambdaAuthorizerConfig.
In the current docs:
"Multiple AWS AppSync APIs can share a single authentication Lambda function. Cross account authorizer use is not permitted."
https://docs.aws.amazon.com/appsync/latest/devguide/security-authz.html

Contributor guide

Open the contributing guide

Research direction

Start with the linked AWS AppSync security authorization documentation and the lambdaAuthorizerConfig configuration described in the issue. Determine the account and IAM constraints for using an authorizer Lambda externally, then define how cross-account authorization should be supported and verified for AppSync APIs.

Written by the indexing model from the issue text.

Assessment

Tech stack
aws, graphql
Domain
api, authorization, cloud
Issue type
Feature
Difficulty
5/5
Estimated time
Over a week
Activity status
Stale
Clarity
Mostly clear
Newbie friendliness
25/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.