Upgrade to Pro — share decks privately, control downloads, hide ads and more …

Securing Amazon HTTP APIs with JWT authorizers

Sponsored · Your Podcast. Everywhere. Effortlessly. Share. Educate. Inspire. Entertain. You do you. We'll handle the rest. →
Avatar for Pradheepa P Pradheepa P
November 06, 2023
29
0

Securing Amazon HTTP APIs with JWT authorizers

Avatar for Pradheepa P

Pradheepa P

November 06, 2023

More Decks by Pradheepa P

See All by Pradheepa P
Demystifying JWT
Avatar for Pradheepa P pradheepa
0
34
WebAuthn Explained
Avatar for Pradheepa P pradheepa
0
100
Securing Amazon API Gateway using Auth0
Avatar for Pradheepa P pradheepa
0
27
Fostering Inclusivity and Equality
Avatar for Pradheepa P pradheepa
0
45
Take Your Authentication Beyond Passwords
Avatar for Pradheepa P pradheepa
0
79
Building Modern GraphQL APIs
Avatar for Pradheepa P pradheepa
0
36

Featured

See All Featured
BBQ
Avatar for Matthew Crist matthewcrist
89
10k
コードの90%をAIが書く世界で何が待っているのか / What awaits us in a world where 90% of the code is written by AI
Avatar for r-kagaya rkaga
62
44k
The untapped power of vector embeddings
Avatar for Frank van Dijk frankvandijk
2
1.8k
How To Stay Up To Date on Web Technology
Avatar for Chris Coyier chriscoyier
790
250k
The Art of Programming - Codeland 2020
Avatar for Erika Heidi erikaheidi
57
14k
Chrome DevTools: State of the Union 2024 - Debugging React & Beyond
Avatar for Addy Osmani addyosmani
10
1.2k
What's in a price? How to price your products and services
Avatar for Michael Herold michaelherold
247
13k
Typedesign – Prime Four
Avatar for Hannes Fritz hannesfritz
42
3.1k
Abbi's Birthday
Avatar for Violet Bock coloredviolet
3
8.2k
No one is an island. Learnings from fostering a developers community.
Avatar for Antonio thoeni
21
3.8k
How to train your dragon (web standard)
Avatar for Monica Dinculescu notwaldorf
97
6.7k
Templates, Plugins, & Blocks: Oh My! Creating the theme that thinks of everything
Avatar for Michelle Schulp Hunt marktimemedia
31
2.8k

Transcript

  1. © 2023, Amazon Web Services, Inc. or its affiliates. All

    rights reserved. © 2023, Amazon Web Services, Inc. or its affiliates. All rights reserved. Hey !!! - Pradheepa Pullanieswaran, @pradheepa - Staff Developer Advocate, Okta - AWS Community Builder - Excited about all things serverless and security - Running Identity and Security Meetup - https://www.linkedin.com/in/pradheepa

  2. © 2023, Amazon Web Services, Inc. or its affiliates. All

    rights reserved. - API Definition - HTTP API - Supported Authorization Types - Auth0 JWT Authorizer Agenda

  3. © 2023, Amazon Web Services, Inc. or its affiliates. All

    rights reserved. Application Programming Interface (API) Client Request Response API Web Server DB

  4. © 2023, Amazon Web Services, Inc. or its affiliates. All

    rights reserved. Gmail API Base URL : https://gmail.googleapis.com

  5. © 2023, Amazon Web Services, Inc. or its affiliates. All

    rights reserved. Amazon HTTP API Cost Efficiencies by 70% Reduced Latency by 70% Easier and Faster to implement

  6. © 2023, Amazon Web Services, Inc. or its affiliates. All

    rights reserved. HTTP Vs REST API Authorization

  7. © 2023, Amazon Web Services, Inc. or its affiliates. All

    rights reserved. What we are building today? AWS Request Response JWT Authorizer Authzn Server Client

  8. © 2023, Amazon Web Services, Inc. or its affiliates. All

    rights reserved. Client makes a request to the API AWS Request JWT Authorizer Authzn Server

  9. © 2023, Amazon Web Services, Inc. or its affiliates. All

    rights reserved. API GW makes a request to the JWT Authorizer AWS

  10. © 2023, Amazon Web Services, Inc. or its affiliates. All

    rights reserved. JWT Authorizer sends to JWKS of Authzn server AWS

  11. © 2023, Amazon Web Services, Inc. or its affiliates. All

    rights reserved. JWT Authorizer validates token, pass to API GW AWS

  12. © 2023, Amazon Web Services, Inc. or its affiliates. All

    rights reserved. API GW triggers Lambda AWS

  13. © 2023, Amazon Web Services, Inc. or its affiliates. All

    rights reserved. Lambda returns the response to API GW AWS

  14. © 2023, Amazon Web Services, Inc. or its affiliates. All

    rights reserved. API GW returns the response client AWS Json Response

  15. © 2023, Amazon Web Services, Inc. or its affiliates. All

    rights reserved. HTTP API Gateway

  16. © 2023, Amazon Web Services, Inc. or its affiliates. All

    rights reserved. Lambda Integration with HTTP API

  17. © 2023, Amazon Web Services, Inc. or its affiliates. All

    rights reserved. JWT Authorization

  18. © 2023, Amazon Web Services, Inc. or its affiliates. All

    rights reserved. Demo

  19. © 2023, Amazon Web Services, Inc. or its affiliates. All

    rights reserved. Thank you! © 2023, Amazon Web Services, Inc. or its affiliates. All rights reserved. Please complete the session survey in the mobile app Pradheepa Pullanieswaran @pradheepa linkedin.com/in/pradheepa