aws / aws/serverless-application-model
Allow previously created Authorizer for AWS::Serverless::HttpApi
- Dominant language
- Python
- Stars
- 9.6k
- Forks
- 2.5k
- Avg merge
- 1d 11h
- Merged PRs (30d)
- 7
Description
**Description:**
Currently, SAM Creates a new authorizer for `AWS::Serverless::HttpApi` when adding an Auth property. At our company, auth is managed in a central location with user pools, resource servers, user pool clients, and authorizers. This makes it easier to change permissions of app clients across different APIs without having to redeploy each application.
Ideally, I'd like to reference an already created Oauth2Authorizer to use in my sam template.
**Example Usage**
```yaml
Type: AWS::Serverless::HttpApi
Properties:
Auth:
Authorizers:
Authorizer: !Ref MyPreviouslyCreatedAuthorizer (Ref to AWS::ApiGatewayV2::Authorizer)
AuthorizationScopes: ['users/read']
```
I'm willing to attempt implementing this if this features aligns with the project roadmap. Let me know 👋
Contributor guide
Assessment
This issue has not been assessed yet.