api-gw-resource.yaml

  HelloWorldApi:
    Type: AWS::Serverless::Api
    Properties:
      Name: hello-world-api
      StageName: v1
      MethodSettings:
        - LoggingLevel: INFO
          ResourcePath: '/*' # allows logging on any resource
          HttpMethod: '*' # allows logging on all methods
      Cors:
        AllowMethods: "'GET,OPTIONS,HEAD,POST,PUT,DELETE,CONNECT,PATCH'"
        AllowHeaders: "'Content-Type,X-Amz-Date,Authorization,X-Api-Key,X-Amz-Security-Token,Accept,Origin,Referer,User-Agent'"
        AllowOrigin: "'*'"

      Auth:
        AddDefaultAuthorizerToCorsPreflight: false
        DefaultAuthorizer: RequestAuth
        Authorizers:
          RequestAuth:
            FunctionPayloadType: REQUEST
            FunctionArn: !GetAtt RequestAuthorizerFunction.Arn
            Identity:
              Headers:
                - Authorization
              ReauthorizeEvery: 0