Skip to content

LambdaAuthorizerConfig

Used by
Source code in docs_src/capo_appsync/types/lambda_authorizer_config.py 
14
15
16
17
18
19
20
class LambdaAuthorizerConfig(TypedDict, closed=True):
    authorizer_result_ttl_in_seconds: "capo_appsync.types.ttl.TTL"
    """<p>The number of seconds a response should be cached for. The default is 0 seconds, which disables caching. If you don't specify a value for <code>authorizerResultTtlInSeconds</code>, the default value is used. The maximum value is one hour (3600 seconds). The Lambda function can override this by returning a <code>ttlOverride</code> key in its response.</p>"""
    authorizer_uri: "capo_appsync.types.string.String"
    """<p>The Amazon Resource Name (ARN) of the Lambda function to be called for authorization. This can be a standard Lambda ARN, a version ARN (<code>.../v3</code>), or an alias ARN. </p> <p> <b>Note</b>: This Lambda function must have the following resource-based policy assigned to it. When configuring Lambda authorizers in the console, this is done for you. To use the Command Line Interface (CLI), run the following:</p> <p> <code>aws lambda add-permission --function-name "arn:aws:lambda:us-east-2:111122223333:function:my-function" --statement-id "appsync" --principal appsync.amazonaws.com --action lambda:InvokeFunction</code> </p>"""
    identity_validation_expression: NotRequired["capo_appsync.types.string.String"]
    """<p>A regular expression for validation of tokens before the Lambda function is called.</p>"""

authorizer_result_ttl_in_seconds instance-attribute 

authorizer_result_ttl_in_seconds: TTL

The number of seconds a response should be cached for. The default is 0 seconds, which disables caching. If you don't specify a value for authorizerResultTtlInSeconds, the default value is used. The maximum value is one hour (3600 seconds). The Lambda function can override this by returning a ttlOverride key in its response.

authorizer_uri instance-attribute 

authorizer_uri: String

The Amazon Resource Name (ARN) of the Lambda function to be called for authorization. This can be a standard Lambda ARN, a version ARN (.../v3), or an alias ARN.

Note: This Lambda function must have the following resource-based policy assigned to it. When configuring Lambda authorizers in the console, this is done for you. To use the Command Line Interface (CLI), run the following:

aws lambda add-permission --function-name "arn:aws:lambda:us-east-2:111122223333:function:my-function" --statement-id "appsync" --principal appsync.amazonaws.com --action lambda:InvokeFunction

identity_validation_expression instance-attribute 

identity_validation_expression: NotRequired[String]

A regular expression for validation of tokens before the Lambda function is called.