lambda_auth

lambda.py

import json

#// Help function to generate an IAM policy

def generatePolicy(principalId, effect, resource):
    
# var generatePolicy = function(principalId, effect, resource) 
    authResponse = {};
    
    authResponseprincipalId = principalId
    if effect and resource :
        policyDocument = {};
        policyDocument["Version"] = '2012-10-17'; 
        policyDocument["Statement"] = [];
        statementOne = {};
        statementOne["Action"] = 'execute-api:Invoke'; 
        statementOne["Effect"] = effect;
        statementOne["Resource"]= resource;
        policyDocument["Statement"].append (statementOne);
        authResponse["policyDocument"] = policyDocument;
    
    
    # Optional output with custom properties of the String, Number or Boolean type.
    authResponse["context"] = {
        "stringKey": "stringval",
        "numberKey": 123,
        "booleanKey": True
    };
    return authResponse;


def lambda_handler(event, context):
    # TODO implement
    token = ""
    if 'authorizationToken' in event:
        token = event["authorizationToken"]
    
    if token == 'YNQXmb4oYv9rSboLGFVmC5b9zszBfZtg5wcFVoD2':
        return generatePolicy("*", "Allow", "*")
    else:
        return generatePolicy("", "Deny", "*")