Comments (3)
esumit
commented on July 17, 2024
May you please provide any comment on this question ?, I am still stuck on this issue.
from api-gateway-secure-pet-store.
esumit
commented on July 17, 2024
How I solved above problem -
Based on the documentation, you would have followed to configure an IAM Role with following stuff (Amazon Cognito Identity,Amazon DynamoDB,AWS Lambda,Amazon CloudWatch Logs).
Say you would have given the name to this 'PetRole'.
Go to the Swagger.Yaml file, and add this ARN of 'PetRole'. to credentials of x-amazon-apigateway-integration for all paths ( Its documentation says to add ARN of 'PetRole'. to credentials of only /users and /login, but I add this to others as well, e.g. for /pets and then it worked )
from api-gateway-secure-pet-store.
ergind
commented on July 17, 2024
@esumit I think what you did is wrong. You supposed to use the user's identity acquired by the login call. Using PetRole in credentials simply makes all endpoints public. Anyone can access them.
from api-gateway-secure-pet-store.
Related Issues (20)
- Swagger on windows HOT 1
- Generated SDKs contains duplicate models which refers the same object in the API definition HOT 2
- What is the meaning "Copy and paste the same access policy we generated for the invocation role" HOT 2
- "errorMessage": "null (Service: AmazonDynamoDBv2; Status Code: 400; Error Code: AccessDeniedException; Request ID: HOT 4
- Web UI
- Podfile format has changed
- Trying to build ios_sample in Xcode fails
- Documentation needs to be updated to use direct swagger entry rather than deprecated "swagger import tool".
- Custom Authorizer HOT 1
- Unable to get response from aws api gateway HOT 1
- Amazon API security with API Keys HOT 6
- Can you post the mapping template used in integration request? HOT 1
- Cognito Auth_Role must include lambda:InvokeFunction
- iOS Sample App - unrecognized selector - AWSSignatureV4Signer
- Testing Secured endpoints with API-Gateway / Postman is not clear HOT 3
- Problem with Trust Policy file HOT 1
- API Gateway and HTML Web pages
- How to make an API only be accessed by an android app?
- PetTest iOS App: After logging in, screen hangs showing spinning "Loading pet list". HOT 6
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from api-gateway-secure-pet-store.