Support for IAM Policy for Lambda Authorizer (v1)

[missourian55]

Appreciate you guys added few event types to support the LambdaAuthorizer, Any plans to add a event type for IAM policy response which will be compatible with REST API?

Currently I am using this class from blueprints
https://github.com/awslabs/aws-apigateway-lambda-authorizer-blueprints/blob/master/blueprints/java/src/io/AuthPolicy.java

APIGatewayCustomAuthorizerEvent (Rest) 
APIGatewayV2CustomAuthorizerEvent (http)
SimpleIAMPolicyResponse (http)
IAMPolicyResponse (rest) <---- missing

[msailes]

Hi missourian55,

Yes, there is an open PR for this response. #174

Mark

[missourian55]

Any ETA on when this will be merged and released? We love to have this soon to remove some custom implementation in our stack.

[msailes]

Hi missourian55,

For a couple of reason this is proving a little annoying. In the short term I would continue to use the AuthPolicy class.

Please reply back if you have any questions.

[msailes]

This has been released in version 3.8.0

[missourian55]

Just gave IamPolicyResponse a try on Rest API. Getting below error

Execution failed due to configuration error: Unable to parse given policy: Syntax error at position (-1,-1)

{"principalId":"some","policyDocument":{"Version":"2012-10-17","Statement":[{"Condition":null,"Action":"execute-api:Invoke","Resource":["arn:aws:execute-api:us-east-1:123456789012:hr2mbvlnw6/some/POST/somemethod"],"Effect":"Allow"}]},"context":null}

I cannot use IamPolicyResponse with REST API? Its only for Http API (API GW V2)?

[msailes]

My apologies, the response required for the REST API has an additional field "usageIdentifierKey": "{api-key}" and is a required field.

I'll create a new PR.

[missourian55]

@msailes Thanks for looking into this. Currently we are using AuthPolicy for REST api and we never populated usageIdentifierKey. Is this a new breaking change?

If I need to populate this where I should get this value from?

[msailes]

Do you have an example handler that you can share which exhibits this error?

[missourian55]

is it possible to share in any private mode? Otherwise I need to do lot of scrubbing to eliminate my company info

[msailes]

You can contact me on my username @amazon.co.uk

[missourian55]

Done