Class: AWSCDK::AppSync::CfnGraphQLAPI::LambdaAuthorizerConfigProperty

Inherits:

Jsii::Struct

• Object
• Jsii::Struct
• AWSCDK::AppSync::CfnGraphQLAPI::LambdaAuthorizerConfigProperty

Defined in:

app_sync/cfn_graph_qlapi.rb

Overview

Configuration for AWS Lambda function authorization.

See Also:

• http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-appsync-graphqlapi-lambdaauthorizerconfig.html

Instance Attribute Summary

• #authorizer_result_ttl_in_seconds ⇒ Numeric^? readonly

  The number of seconds a response should be cached for.

• #authorizer_uri ⇒ String^? readonly

  The ARN of the Lambda function to be called for authorization.

• #identity_validation_expression ⇒ String^? readonly

  A regular expression for validation of tokens before the Lambda function is called.

Class Method Summary

• .jsii_properties ⇒ Object

Instance Method Summary

• #initialize(authorizer_result_ttl_in_seconds: nil, authorizer_uri: nil, identity_validation_expression: nil) ⇒ LambdaAuthorizerConfigProperty constructor

  A new instance of LambdaAuthorizerConfigProperty.

• #to_jsii ⇒ Object

Constructor Details

#initialize(authorizer_result_ttl_in_seconds: nil, authorizer_uri: nil, identity_validation_expression: nil) ⇒ LambdaAuthorizerConfigProperty

Returns a new instance of LambdaAuthorizerConfigProperty.

Parameters:

• authorizer_result_ttl_in_seconds (Numeric, nil) (defaults to: nil) —

  The number of seconds a response should be cached for.

• authorizer_uri (String, nil) (defaults to: nil) —

  The ARN of the Lambda function to be called for authorization.

• identity_validation_expression (String, nil) (defaults to: nil) —

  A regular expression for validation of tokens before the Lambda function is called.

# File 'app_sync/cfn_graph_qlapi.rb', line 995

def initialize(authorizer_result_ttl_in_seconds: nil, authorizer_uri: nil, identity_validation_expression: nil)
  @authorizer_result_ttl_in_seconds = authorizer_result_ttl_in_seconds
  Jsii::Type.check_type(@authorizer_result_ttl_in_seconds, JSON.parse(Base64.strict_decode64("eyJwcmltaXRpdmUiOiJudW1iZXIifQ==")), "authorizerResultTtlInSeconds") unless @authorizer_result_ttl_in_seconds.nil?
  @authorizer_uri = authorizer_uri
  Jsii::Type.check_type(@authorizer_uri, JSON.parse(Base64.strict_decode64("eyJwcmltaXRpdmUiOiJzdHJpbmcifQ==")), "authorizerUri") unless @authorizer_uri.nil?
  @identity_validation_expression = identity_validation_expression
  Jsii::Type.check_type(@identity_validation_expression, JSON.parse(Base64.strict_decode64("eyJwcmltaXRpdmUiOiJzdHJpbmcifQ==")), "identityValidationExpression") unless @identity_validation_expression.nil?
end

Instance Attribute Details

#authorizer_result_ttl_in_seconds ⇒ Numeric^? (readonly)

The number of seconds a response should be cached for.

The default is 0 seconds, which disables caching. If you don't specify a value for authorizer_result_ttl_in_seconds , the default value is used. The maximum value is one hour (3600 seconds). The Lambda function can override this by returning a ttl_override key in its response.

Returns:

• (Numeric, nil)

See Also:

• http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-appsync-graphqlapi-lambdaauthorizerconfig.html#cfn-appsync-graphqlapi-lambdaauthorizerconfig-authorizerresultttlinseconds

# File 'app_sync/cfn_graph_qlapi.rb', line 1010

def authorizer_result_ttl_in_seconds
  @authorizer_result_ttl_in_seconds
end

#authorizer_uri ⇒ String^? (readonly)

The ARN of the Lambda function to be called for authorization.

This may be a standard Lambda ARN, a version ARN ( .../v3 ) or alias ARN.

Note : This Lambda function must have the following resource-based policy assigned to it. When configuring Lambda authorizers in the console, this is done for you. To do so with the AWS CLI , run the following:

aws lambda add-permission --function-name "arn:aws:lambda:us-east-2:111122223333:function:my-function" --statement-id "appsync" --principal appsync.amazonaws.com --action lambda:InvokeFunction

Returns:

• (String, nil)

See Also:

• http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-appsync-graphqlapi-lambdaauthorizerconfig.html#cfn-appsync-graphqlapi-lambdaauthorizerconfig-authorizeruri

# File 'app_sync/cfn_graph_qlapi.rb', line 1021

def authorizer_uri
  @authorizer_uri
end

#identity_validation_expression ⇒ String^? (readonly)

A regular expression for validation of tokens before the Lambda function is called.

Returns:

• (String, nil)

See Also:

• http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-appsync-graphqlapi-lambdaauthorizerconfig.html#cfn-appsync-graphqlapi-lambdaauthorizerconfig-identityvalidationexpression

# File 'app_sync/cfn_graph_qlapi.rb', line 1026

def identity_validation_expression
  @identity_validation_expression
end

Class Method Details

.jsii_properties ⇒ Object

# File 'app_sync/cfn_graph_qlapi.rb', line 1028

def self.jsii_properties
  {
    :authorizer_result_ttl_in_seconds => "authorizerResultTtlInSeconds",
    :authorizer_uri => "authorizerUri",
    :identity_validation_expression => "identityValidationExpression",
  }
end

Instance Method Details

#to_jsii ⇒ Object

# File 'app_sync/cfn_graph_qlapi.rb', line 1036

def to_jsii
  result = {}
  result.merge!({
    "authorizerResultTtlInSeconds" => @authorizer_result_ttl_in_seconds,
    "authorizerUri" => @authorizer_uri,
    "identityValidationExpression" => @identity_validation_expression,
  })
  result.compact
end