New Pattern Submission: AWS API Gateway IAM authorization and AWS v4 request signing (sls & Python)

[bb245]

Issue #, if available: #2045

Description of changes:

This pattern involves employing an AWS_IAM authorizer to secure an API endpoint through Python 3 and the Serverless framework. It illustrates the process of signing the HTTP request using IAM credentials and adhering to the AWS v4 signing process. This ensures access to the protected endpoint from a public API. The interaction with APIs is facilitated by AWS API Gateway.

By submitting this pull request, I confirm that you can use, modify, copy, and redistribute this contribution, under the terms of your choice.

[bb245]

@cornelcroi @bls20AWS fyi, moved the PR from draft to review.

[github-actions]

@undefined your 'example-pattern.json' is missing some key fields, please review below and address any errors you have

1. description: description does not meet maximum length of 150

If you need any help, take a look at the example-pattern file.

Make the changes, and push your changes back to this pull request. When all automated checks are successful, the Serverless DA team will process your pull request.

[bb245]

@cornelcroi @bls20AWS FYI, the description char limit is fixed.

[github-actions]

Valid pattern file found.

Reviewer you can view the pattern file here

[cornelcroi]

Hi @bb245,

I've reviewed the code and tried to understand from the readme what is the purpose of the pattern and here are my remarks:

• the workflow is not easy to understand from the diagram
• you are showing basically how a lambda calls another lambda through a public API GW endpoint (protected using AWS_IAM) but this an anti pattern (especially in your case where you have the same API GW in front of both Lambdas).
  I imagine your purpose was to show how to sign a request but in this implementation it makes an anti pattern.

I suggest you find another implementation to demonstrate how to sign requests.

[bb245]

Hi @cornelcroi, I updated the implementation & request your review. Thank you.

[cornelcroi]

Hi @bb245,

Thanks for the update.
The diagram now looks much better, easy to understand.
However in your pattern you make a call from a Lambda function to another Lambda function through an API Gateway endpoint which is still an anti pattern.
We will not be able to put this pattern on ServerlessLand.
If you come across another scenario where signing a request proves beneficial while adhering to a serverless pattern, we would be pleased to examine it.