Access API Gateway Endpoint without Authentication Token?

[nelsonic]

When attempting to access the lambda function using the url: https://r09u5uw11g.execute-api.eu-west-1.amazonaws.com/prod/Concatenate We get:

What do w need to do to make this publicly accessible?

[jackcarlisle]

@nelsonic I think we need to either re-configure the security of the API endpoint or we need to make the secret key available to anyone who wants to use it.

[nelsonic]

Permission Model: http://docs.aws.amazon.com/lambda/latest/dg/intro-permission-model.html API Keys: http://docs.aws.amazon.com/apigateway/latest/developerguide/how-to-api-keys.html

test api key: LhGU6jr5C19QrT8yexCNoaBYeYHy9iwa5ugZlRzm (don't worry, I will change this...)

so we can run the following cURL command in terminal:

curl --header "x-api-key: LhGU6jr5C19QrT8yexCNoaBYeYHy9iwa5ugZlRzm" https://r09u5uw11g.execute-api.eu-west-1.amazonaws.com/prod/Concatenate

[jackcarlisle]

@nelsonic I was just looking at the permissions model docs in the API Gateway http://docs.aws.amazon.com/apigateway/latest/developerguide/permissions.html Can you set up the access policy from either Lambda or API Gateway?

[nelsonic]

1. If you aren't already viewing the API Gateway, select it from your AWS Console Menu:
2. Create an API Key in the Amazon API Gateway section of the AWS Console:
3. Create a New API Key:
4. Name your key, Enable it and click Save button:
5. Once you enable your API Key, a section will appear below the creation form that allows you to assign the new API Key to one of your APIs "Stage". Select the API & Stage (in our case the API is LambdaMicroservice and the stage is prod) then click the Add button: You should now see that the API Key is Enabled for your prod stage:
6. _Copy_ the _API key_ from this screen and save it to your notepad.
7. Return to your AWS Console and select Lambda. This will display the list of your Lambda functions. Select the Concatenate Lambda function you created earlier.
8. When you are viewing your Lambda Function, select the API Endpoints tab and copy the _API endpoint URL_:
9. With the endpoint URL and API Key copied you can now run a cURL Command in your terminal to access the endpoint:

curl --header "x-api-key: LhGU6jr5C19QrT8yexCNoaBYeYHy9iwa5ugZlRzm" https://r09u5uw11g.execute-api.eu-west-1.amazonaws.com/prod/Concatenate

Note: I slightly modified my Lambda function to return a timestamp so I know when the funciton gets executed:

exports.handler = function(event, context) {
    console.log('Received event:', JSON.stringify(event, null, 2));
    console.log('context:', JSON.stringify(context, null, 2));
    event.key1 = event.key1 || 'Hello'; // set default values
    event.key2 = event.key1 || 'World!';
    console.log('value1 =', event.key1);
    console.log('value2 =', event.key2);
    var date = new Date();
    var time = date.toString();
    context.succeed(event.key1 + ' ' + event.key2 + ' >> ' + time );
};

For even more steps on enabling API Keys on AWS API Gateway, see: http://docs.aws.amazon.com/apigateway/latest/developerguide/how-to-api-keys.html