确保我的lambda功能的最简单方法是什么?

发布于 2025-02-12 20:13:32 字数 206 浏览 3 评论 0原文

我有一个需要由用户访问的lambda。他们必须能够在浏览器中访问URL。确保功能室的最简单方法是什么,以便如果要泄漏URL,则需要另一层安全性?

我不能使用AWS_IAM,因为要求用户点击链接,我不能指望他们处理AWS SIGV4。

一个简单的解决方案是使用Queryparams并添加访问代码参数,该参数在调用Lambda时被检查,但由于各种原因,这似乎是一个坏主意。

I have a lambda that needs to be accessed by a user. They must be able to visit the URL in a browser. What is the simplest way to secure the functionURL so that if the URL were to leak, there would be another layer of security that would need to be gone through?

I can't use AWS_IAM as the requirement is that the user clicks on the link and I can't expect them to deal with AWS SigV4.

A simple solution would be using the queryparams and adding an access code parameter that is checked for when the lambda is called but this seems like a bad idea for various reasons.

如果你对这篇内容有疑问,欢迎到本站社区发帖提问 参与讨论,获取更多帮助,或者扫码二维码加入 Web 技术交流群。

扫码二维码加入Web技术交流群

发布评论

需要 登录 才能够评论, 你可以免费 注册 一个本站的账号。

评论(1

末が日狂欢 2025-02-19 20:13:32

lambda函数url仅支持aws_iamauthtype参数none,如文档

我无法使用AWS_IAM,因为要求用户点击链接,我不能指望他们处理AWS SIGV4。

然后,您需要使用AWS API网关,然后将Lambda功能放在其后面。

Lambda function URLs only support AWS_IAM and NONE for the AuthType parameter, as mentioned in the documentation.

I can't use AWS_IAM as the requirement is that the user clicks on the link and I can't expect them to deal with AWS SigV4.

Then you need to use an AWS API Gateway, and place your lambda function behind it.

~没有更多了~
我们使用 Cookies 和其他技术来定制您的体验包括您的登录状态等。通过阅读我们的 隐私政策 了解更多相关信息。 单击 接受 或继续使用网站,即表示您同意使用 Cookies 和您的相关数据。
原文