aws-lambda - 如何在 AWS lambda 中创建一个自定义授权方，并考虑 API 网关中自定义域名的基本路径映射？

Question

似乎授权人没有收到任何与基本路径相关的信息。即使您在上下文中传递它，似乎也无法将其添加到策略中。

例如：domain.com/basepath1**/resource/resourceID** domain.com/basepath2**/resource/resourceID**

目前的政策声明：

[{ 操作：'execute-api:Invoke'，效果：'允许'，资源：'arn:aws:execute-api:us-east-1:accountID:apiID/dev/GET**/resource/resourceID** ' }]

Answer 1

API Gateway 最近发布了对客户授权者的一些增强功能，包括一个新的 REQUEST 类型授权者，它从传入的请求中传递了更多信息。虽然未明确调用基本路径，但它可能存在于路径参数之一中。

{
    "type": "REQUEST",
    "methodArn": "arn:aws:execute-api:us-east-1:123456789012:s4x3opwd6i/test/GET/request",
    "resource": "/request",
    "path": "/request",
    "httpMethod": "GET",
    "headers": {
        "X-AMZ-Date": "20170718T062915Z",
        "Accept": "*/*",
        "HeaderAuth1": "headerValue1",
        "CloudFront-Viewer-Country": "US",
        "CloudFront-Forwarded-Proto": "https",
        "CloudFront-Is-Tablet-Viewer": "false",
        "CloudFront-Is-Mobile-Viewer": "false",
        "User-Agent": "...",
        "X-Forwarded-Proto": "https",
        "CloudFront-Is-SmartTV-Viewer": "false",
        "Host": "....execute-api.us-east-1.amazonaws.com",
        "Accept-Encoding": "gzip, deflate",
        "X-Forwarded-Port": "443",
        "X-Amzn-Trace-Id": "...",
        "Via": "...cloudfront.net (CloudFront)",
        "X-Amz-Cf-Id": "...",
        "X-Forwarded-For": "..., ...",
        "Postman-Token": "...",
        "cache-control": "no-cache",
        "CloudFront-Is-Desktop-Viewer": "true",
        "Content-Type": "application/x-www-form-urlencoded"
    },
    "queryStringParameters": {
        "QueryString1": "queryValue1"
    },
    "pathParameters": {},
    "stageVariables": {
        "StageVar1": "stageValue1"
    },
    "requestContext": {
        "path": "/request",
        "accountId": "123456789012",
        "resourceId": "05c7jb",
        "stage": "test",
        "requestId": "...",
        "identity": {
            "apiKey": "...",
            "sourceIp": "..."
        },
        "resourcePath": "/request",
        "httpMethod": "GET",
        "apiId": "s4x3opwd6i"
    }
}

从这里的文档