Upgrade to Pro — share decks privately, control downloads, hide ads and more …

Securing Amazon HTTP APIs with JWT authorizers

Avatar for Pradheepa P Pradheepa P
November 06, 2023
33
0

Securing Amazon HTTP APIs with JWT authorizers

Avatar for Pradheepa P

Pradheepa P

November 06, 2023

More Decks by Pradheepa P

See All by Pradheepa P
Demystifying JWT
Avatar for Pradheepa P pradheepa
0
37
WebAuthn Explained
Avatar for Pradheepa P pradheepa
0
120
Securing Amazon API Gateway using Auth0
Avatar for Pradheepa P pradheepa
0
30
Fostering Inclusivity and Equality
Avatar for Pradheepa P pradheepa
0
47
Take Your Authentication Beyond Passwords
Avatar for Pradheepa P pradheepa
0
81
Building Modern GraphQL APIs
Avatar for Pradheepa P pradheepa
0
39

Featured

See All Featured
HDC tutorial
Avatar for Michiel Stock michielstock
2
850
Max Prin - Stacking Signals: How International SEO Comes Together (And Falls Apart)
Avatar for Tech SEO Connect techseoconnect
PRO
0
450
Dominate Local Search Results - an insider guide to GBP, reviews, and Local SEO
Avatar for Greg Gifford greggifford
PRO
0
320
[RailsConf 2023] Rails as a piece of cake
Avatar for Vladimir Dementyev palkan
59
7k
Navigating Algorithm Shifts & AI Overviews - #SMXNext
Avatar for Aleyda Solis aleyda
1
1.6k
4 Signs Your Business is Dying
Avatar for Josh Pigford shpigford
187
23k
A Guide to Academic Writing Using Generative AI - A Workshop
Avatar for Kenji Saito ks91
PRO
1
420
For a Future-Friendly Web
Avatar for Brad Frost brad_frost
183
10k
Primal Persuasion: How to Engage the Brain for Learning That Lasts
Avatar for Mike Taylor tmiket
0
440
Building Adaptive Systems
Avatar for Chris Keathley keathley
44
3.2k
DevOps and Value Stream Thinking: Enabling flow, efficiency and business value
Avatar for Helen Beal helenjbeal
1
380
Build your cross-platform service in a week with App Engine
Avatar for Jose L jlugia
234
19k

Transcript

  1. © 2023, Amazon Web Services, Inc. or its affiliates. All

    rights reserved. © 2023, Amazon Web Services, Inc. or its affiliates. All rights reserved. Hey !!! - Pradheepa Pullanieswaran, @pradheepa - Staff Developer Advocate, Okta - AWS Community Builder - Excited about all things serverless and security - Running Identity and Security Meetup - https://www.linkedin.com/in/pradheepa

  2. © 2023, Amazon Web Services, Inc. or its affiliates. All

    rights reserved. - API Definition - HTTP API - Supported Authorization Types - Auth0 JWT Authorizer Agenda

  3. © 2023, Amazon Web Services, Inc. or its affiliates. All

    rights reserved. Application Programming Interface (API) Client Request Response API Web Server DB

  4. © 2023, Amazon Web Services, Inc. or its affiliates. All

    rights reserved. Gmail API Base URL : https://gmail.googleapis.com

  5. © 2023, Amazon Web Services, Inc. or its affiliates. All

    rights reserved. Amazon HTTP API Cost Efficiencies by 70% Reduced Latency by 70% Easier and Faster to implement

  6. © 2023, Amazon Web Services, Inc. or its affiliates. All

    rights reserved. HTTP Vs REST API Authorization

  7. © 2023, Amazon Web Services, Inc. or its affiliates. All

    rights reserved. What we are building today? AWS Request Response JWT Authorizer Authzn Server Client

  8. © 2023, Amazon Web Services, Inc. or its affiliates. All

    rights reserved. Client makes a request to the API AWS Request JWT Authorizer Authzn Server

  9. © 2023, Amazon Web Services, Inc. or its affiliates. All

    rights reserved. API GW makes a request to the JWT Authorizer AWS

  10. © 2023, Amazon Web Services, Inc. or its affiliates. All

    rights reserved. JWT Authorizer sends to JWKS of Authzn server AWS

  11. © 2023, Amazon Web Services, Inc. or its affiliates. All

    rights reserved. JWT Authorizer validates token, pass to API GW AWS

  12. © 2023, Amazon Web Services, Inc. or its affiliates. All

    rights reserved. API GW triggers Lambda AWS

  13. © 2023, Amazon Web Services, Inc. or its affiliates. All

    rights reserved. Lambda returns the response to API GW AWS

  14. © 2023, Amazon Web Services, Inc. or its affiliates. All

    rights reserved. API GW returns the response client AWS Json Response

  15. © 2023, Amazon Web Services, Inc. or its affiliates. All

    rights reserved. HTTP API Gateway

  16. © 2023, Amazon Web Services, Inc. or its affiliates. All

    rights reserved. Lambda Integration with HTTP API

  17. © 2023, Amazon Web Services, Inc. or its affiliates. All

    rights reserved. JWT Authorization

  18. © 2023, Amazon Web Services, Inc. or its affiliates. All

    rights reserved. Demo

  19. © 2023, Amazon Web Services, Inc. or its affiliates. All

    rights reserved. Thank you! © 2023, Amazon Web Services, Inc. or its affiliates. All rights reserved. Please complete the session survey in the mobile app Pradheepa Pullanieswaran @pradheepa linkedin.com/in/pradheepa