
Ultimate access to all questions.
The development team at your company specializes in creating serverless solutions using AWS Lambda. Currently, these Lambda functions are invoked by clients through AWS API Gateway, which is openly accessible to anyone. The team lead is seeking a way to control access to these Lambda functions utilizing a third-party authorization mechanism.
As a Developer Associate, which of the following options would you recommend to achieve this objective?
A
Cognito User Pools
B
IAM permissions with sigv4
C
Lambda Authorizer
D
API Gateway User Pools
Explanation:
An Amazon API Gateway Lambda authorizer (formerly known as a custom authorizer) is a Lambda function that you provide to control access to your API. A Lambda authorizer uses bearer token authentication strategies, such as OAuth or SAML. Before creating an API Gateway Lambda authorizer, you must first create the AWS Lambda function that implements the logic to authorize and, if necessary, to authenticate the caller.