将API密钥源设置为AWS::Serverless::Api中的授权者

Question

我有一个通过云形成AWS::无服务器::Api对象定义的应用编程接口。我需要它从其自定义授权器中获取使用计划密钥，相当于在AWS::ApiGateway::RestApi上将ApiKeySourceType设置为AUTHORIZER。如何做到这一点？

这是我正在使用的当前定义，包括从正确配置的API导出的OpenAPI定义。我确实觉得很奇怪，即使在将配置设置为AUTHORIZER之后，< code>x-api-key仍然为api_key列出。

  RestApi:
    Type: AWS::Serverless::Api
    Properties:
      Name: !Sub ${AWS::StackName}-API
      StageName: !Ref ApiStageName
      MethodSettings:
        - CachingEnabled: false
          DataTraceEnabled: false
          HttpMethod: '*'
          LoggingLevel: INFO
          MetricsEnabled: true
          ResourcePath: '/*'
          ThrottlingBurstLimit: !Ref ThrottlingBurstLimit
          ThrottlingRateLimit: !Ref ThrottlingRateLimit
      AccessLogSetting:
        DestinationArn: !GetAtt ApiLogs.Arn
        # format is copied from an example generated by the web console
        Format: '{ "requestId":"$context.requestId", "ip": "$context.identity.sourceIp", "requestTime":"$context.requestTime", "httpMethod":"$context.httpMethod","routeKey":"$context.routeKey", "status":"$context.status","protocol":"$context.protocol", "responseLength":"$context.responseLength" }'
      CacheClusterEnabled: false
      TracingEnabled: true
      DefinitionBody: !Sub |
        openapi: "3.0.1"
        paths:
          /v2/oauth2/token:
            post:
              x-amazon-apigateway-integration:
                connectionId: "${RestApiVpcLink}"
                httpMethod: "POST"
                uri: "http://${VPCLinkLB.DNSName}/v2/oauth2/token"
                passthroughBehavior: "when_no_match"
                connectionType: "VPC_LINK"
                type: "http_proxy"
          /{proxy+}:
            x-amazon-apigateway-any-method:
              parameters:
                - name: "proxy"
                  in: "path"
                  required: true
                  schema:
                    type: "string"
              security:
                - LambdaAuthorizer: []
                - api_key: []
              x-amazon-apigateway-integration:
                connectionId: "${RestApiVpcLink}"
                httpMethod: "ANY"
                uri: "http://${VPCLinkLB.DNSName}/{proxy}"
                requestParameters:
                  integration.request.path.proxy: "method.request.path.proxy"
                passthroughBehavior: "when_no_match"
                connectionType: "VPC_LINK"
                type: "http_proxy"
        components:
          securitySchemes:
            LambdaAuthorizer:
              type: apiKey
              name: Authorization
              in: header
              x-amazon-apigateway-authtype: custom
              x-amazon-apigateway-authorizer:
                authorizerUri: "arn:aws:apigateway:${AWS::Region}:lambda:path/2015-03-31/functions/${GatewayAuthorizerLambda.Arn}/invocations"
                authorizerResultTtlInSeconds: 300
                identityValidationExpression: "Bearer .*"
                type: "token"
            api_key:
              type: "apiKey"
              name: "x-api-key"
              in: "header"

我主要使用< code>Serverless::Api,而不是它的组件< code>ApiGateway对象，因为我发现否则阶段/部署会非常令人头疼。

Answer 1

x-amazon-apigateway-api-key-source： AUTHORIZER需要作为兄弟添加到openapi："3.0.1"。openAPI扩展在这里记录。

看起来在阶段导出中一定有一个bug导致了它的丢失。