admin管理员组

文章数量:1416651

I want to be able to deploy web apps made by people in my company, but I don't want to have to modify our code for auth. We can protect access to our frontend with an application load balancer easily, but I don't know how to protect the API easily whilst still allowing for programatic access to the API.

It seems like the ALB creates a cookie called AWSELBAuthSessionCookie, however to access the API via python, I would need to add an Authorization Bearer header.

It this currently possible with AWS's ALB?

I want to be able to deploy web apps made by people in my company, but I don't want to have to modify our code for auth. We can protect access to our frontend with an application load balancer easily, but I don't know how to protect the API easily whilst still allowing for programatic access to the API.

It seems like the ALB creates a cookie called AWSELBAuthSessionCookie, however to access the API via python, I would need to add an Authorization Bearer header.

It this currently possible with AWS's ALB?

  • amazon-web-services
  • aws-application-load-balancer
Share Improve this question asked Feb 2 at 21:28 Tom McLeanTom McLean 6,3611 gold badge21 silver badges51 bronze badges
Add a comment  | 

1 Answer 1

Reset to default 0

ALB doesn't natively support Authorization: Bearer headers. You can use a Cognito User Pool with API Gateway for JWT validation or a Lambda Authorizer as middleware for authentication.

本文标签：

版权声明：本文标题：amazon web services - Can I allow programatic access to my API, running behind an application load balancer with cognito auth? - 内容由网友自发贡献，该文观点仅代表作者本人， 转载请联系作者并注明出处：http://www.betaflare.com/web/1745255839a2650095.html， 本站仅提供信息存储空间服务，不拥有所有权，不承担相关法律责任。如发现本站有涉嫌抄袭侵权/违法违规的内容，一经查实，本站将立刻删除。