Examkin

Soru

Zorluk: ZorAPI Development and Integration with Amazon API Gateway

A developer is designing a REST API using Amazon API Gateway that routes client requests to an AWS Lambda backend. The API must satisfy the following development requirements:

1. Authenticate and validate JSON Web Tokens (JWTs) issued by an Amazon Cognito User Pool at the gateway level before forwarding requests.
2. Pass the complete HTTPS request details (including path parameters, headers, and query strings) directly to the Lambda function without the developer having to configure or maintain mapping templates.

Which two actions should the developer take to meet these requirements?

  1. Configure a Cognito User Pool Authorizer on the API Gateway resource method.Cevap
  2. Use a Lambda Proxy Integration for the API Gateway integration type.Cevap
  3. C
    Create a custom Lambda Authorizer to validate the JWT and generate an IAM policy dynamically.
  4. D
    Use a Lambda Custom Integration and configure request mapping templates to format the incoming payload for the Lambda function.
  5. E
    Enable CORS at the API Gateway resource level and rely on API Gateway to append the Access-Control-Allow-Origin header to the Lambda proxy responses.

Cevap

Configure a Cognito User Pool Authorizer on the API Gateway resource method, and use a Lambda Proxy Integration for the API Gateway integration type.
The correct options are configuring a Cognito User Pool Authorizer and using a Lambda Proxy Integration. A Cognito User Pool Authorizer natively validates JWT tokens at the gateway level without custom code. A Lambda Proxy Integration automatically passes the request context (headers, path parameters, query strings) directly to the Lambda function as a structured event payload, satisfying the requirement to avoid configuring mapping templates.

Adım Adım Çözüm

1
Evaluate the authentication requirement.
Identify that the JWTs are issued by an Amazon Cognito User Pool and must be validated at the API Gateway level.
Since the token source is a Cognito User Pool, a built-in Cognito User Pool Authorizer is the most efficient and native choice, avoiding the overhead of custom Lambda code.
2
Evaluate the request routing and mapping requirement.
Determine the integration type that passes headers, path parameters, and query strings without manual mapping template configuration.
A Lambda Proxy Integration automatically packages the entire HTTP request into a single structured event object and passes it to the Lambda function, completely avoiding mapping templates.
3
Examine the remaining options for potential misconceptions.
Eliminate the custom Lambda Authorizer, Lambda Custom integration, and CORS console-only configuration options.
Custom authorizers introduce unnecessary code; custom integrations require mapping templates; console-configured CORS does not automatically inject headers into Lambda proxy responses.

Anahtar Kavram

Configuring API Gateway integrations and authorizers to optimize development overhead and maintain native features.
Bu soruyu puanla

Konular

API Development and Integration with Amazon API Gateway

Bu konudan daha fazla soru