Struct LambdaAuthorizerConfig

#[non_exhaustive]
pub struct LambdaAuthorizerConfig {
    pub authorizer_result_ttl_in_seconds: i32,
    pub authorizer_uri: String,
    pub identity_validation_expression: Option<String>,
}

A LambdaAuthorizerConfig specifies how to authorize AppSync API access when using the AWS_LAMBDA authorizer mode. Be aware that an AppSync API can have only one Lambda authorizer configured at a time.

Fields (Non-exhaustive)

Non-exhaustive structs could have additional fields added in future. Therefore, non-exhaustive structs cannot be constructed in external crates using the traditional Struct { .. } syntax; cannot be matched against without a wildcard ..; and struct update syntax will not work.

authorizer_result_ttl_in_seconds: i32

The number of seconds a response should be cached for. The default is 0 seconds, which disables caching. If you don't specify a value for authorizerResultTtlInSeconds, the default value is used. The maximum value is one hour (3600 seconds). The Lambda function can override this by returning a ttlOverride key in its response.

authorizer_uri: String

The Amazon Resource Name (ARN) of the Lambda function to be called for authorization. This can be a standard Lambda ARN, a version ARN (.../v3), or an alias ARN.

Note: This Lambda function must have the following resource-based policy assigned to it. When configuring Lambda authorizers in the console, this is done for you. To use the Command Line Interface (CLI), run the following:

aws lambda add-permission --function-name "arn:aws:lambda:us-east-2:111122223333:function:my-function" --statement-id "appsync" --principal appsync.amazonaws.com --action lambda:InvokeFunction

identity_validation_expression: Option<String>

A regular expression for validation of tokens before the Lambda function is called.

Implementations

impl LambdaAuthorizerConfig

pub fn authorizer_result_ttl_in_seconds(&self) -> i32

The number of seconds a response should be cached for. The default is 0 seconds, which disables caching. If you don't specify a value for authorizerResultTtlInSeconds, the default value is used. The maximum value is one hour (3600 seconds). The Lambda function can override this by returning a ttlOverride key in its response.

pub fn authorizer_uri(&self) -> &str

The Amazon Resource Name (ARN) of the Lambda function to be called for authorization. This can be a standard Lambda ARN, a version ARN (.../v3), or an alias ARN.

Note: This Lambda function must have the following resource-based policy assigned to it. When configuring Lambda authorizers in the console, this is done for you. To use the Command Line Interface (CLI), run the following:

aws lambda add-permission --function-name "arn:aws:lambda:us-east-2:111122223333:function:my-function" --statement-id "appsync" --principal appsync.amazonaws.com --action lambda:InvokeFunction

pub fn identity_validation_expression(&self) -> Option<&str>

A regular expression for validation of tokens before the Lambda function is called.

impl LambdaAuthorizerConfig

pub fn builder() -> LambdaAuthorizerConfigBuilder

Creates a new builder-style object to manufacture LambdaAuthorizerConfig.

Trait Implementations

impl Clone for LambdaAuthorizerConfig

fn clone(&self) -> LambdaAuthorizerConfig

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for LambdaAuthorizerConfig

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl PartialEq for LambdaAuthorizerConfig

fn eq(&self, other: &LambdaAuthorizerConfig) -> bool

Tests for self and other values to be equal, and is used by ==.

fn ne(&self, other: &Rhs) -> bool

Tests for !=. The default implementation is almost always sufficient, and should not be overridden without very good reason.

impl StructuralPartialEq for LambdaAuthorizerConfig