AWS API Gateway with External Authentication

Question

I created a backend that spans multiple instances of EC2 (microservice architecture), and I use the AWS API Gateway to transfer all requests through a single endpoint. I also created a token-based authentication system, which requires that each request validate the token in the Auth service before it is completed.

Is there anyway to tell the Gateway API to perform the test by calling the Auth service, instead of implementing it on each endpoint backend?

Answer 1

The Api Gateway team is here.

Thanks for your feedback. We have this item in our roadmap, and we will definitely work on its solution. For now, you will have to implement it outside of Api Gateway.

EDIT 2/17

Now we’ve launched user authorizers, a new feature that adds a Lambda-based authentication level to your RestApi API.

Blog post - https://aws.amazon.com/blogs/compute/introducing-custom-authorizers-in-amazon-api-gateway/ Documents - http://docs.aws.amazon.com/apigateway/latest/ developerguide / use-custom-authorizer.html