AWS::Serverless::HttpApi - Unable to setup Lambda Authorizer

[paulmowat]

Description:

When trying to use AWS::Serverless:HttpApi through a SAM template. There appears to be no way to specify a Lambda Authorizer against reference link 1. It only appears possible to use OAuth2Authorizer.

Should be able to configure lambda authorizer as per reference link 2 via SAM template.

Expected result:
Be able to setup a lambda authorizer against a AWS::Serverless:HttpApi

Reference Links:

1. https://docs.aws.amazon.com/serverless-application-model/latest/developerguide/sam-property-httpapi-httpapiauth.html
2. https://docs.aws.amazon.com/apigateway/latest/developerguide/http-api-lambda-authorizer.html

[darkpanic]

Hi! You are correct that the HTTP API has less functionality and you likely want to look at AWS::Serverless::Api, configuring the Authorizer property within Auth to reference the LambdaRequestAuthorizer.

Hope this helps!

https://docs.aws.amazon.com/serverless-application-model/latest/developerguide/sam-property-api-lambdarequestauthorizer.html

[paulmowat]

@darkpanic I'm not looking to use AWS:Serverless:Api. I know I could use it, but there's reasons where I need to use AWS::Serverless:HttpApi.

The HTTP API Gateway does supports lambda authorizers as per reference link 2 on my post. They are just not configurable from within a SAM template as it currently stands, but they should be.

I would also like to add that SAM does not support IAM Authorizors for Http Api. If these could be added too that would be really helpful.

[wchengru]

We will release #1733 to support it.

[wchengru]

We have released #1733 . SAM will support Lambda Authorizer since version 1.28.1. Will close this one.

[ivo]

Hi, I have tried multiple variants to get lambda authorizer working with AWS::Serverless::HttpApi, but it seems that SAM is not "attaching" the authorizer correctly and this is causing 'internal server error'. When i manually detach and re-attach the authorizer through the AWS console (admin ui) after SAM deploy, it works without error.
#1733 seems to have unticked boxes on its checklist (Update documentation, Verify transformed template deploys and application functions as expected). Can someone share some boilerplate code that was verified successfully?