aws / aws/serverless-application-model

Allow previously created Authorizer for AWS::Serverless::HttpApi

Open
#1,785 0 comments 0 reactions 1 assignee Claimed by @qingchm View on GitHub
maintainer/need-response stage/pm-review type/feature
Dominant language
Python
Stars
9.6k
Forks
2.5k
Avg merge
1d 11h
Merged PRs (30d)
7

Description

**Description:**

Currently, SAM Creates a new authorizer for `AWS::Serverless::HttpApi` when adding an Auth property. At our company, auth is managed in a central location with user pools, resource servers, user pool clients, and authorizers. This makes it easier to change permissions of app clients across different APIs without having to redeploy each application.

Ideally, I'd like to reference an already created Oauth2Authorizer to use in my sam template.

**Example Usage**

```yaml
Type: AWS::Serverless::HttpApi
Properties:
Auth:
Authorizers:
Authorizer: !Ref MyPreviouslyCreatedAuthorizer (Ref to AWS::ApiGatewayV2::Authorizer)
AuthorizationScopes: ['users/read']
```

I'm willing to attempt implementing this if this features aligns with the project roadmap. Let me know 👋

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.