How to open anonymous access to AWS API Gateway resource

Question

I have a number of lambda functions exposed via the AWS Gateway Service as such:

- /some-resource
    GET
    POST
    OPTIONS
- /some-other-resource
    GET
    POST
    OPTIONS
- /some-public-resource
    GET
    OPTIONS

The resources are secured with Access Tokens. However, I would like to allow anonymous access to the /some-public-resource resource, so that it can be accessed without requiring any authentication.

I have tried to create a policy in IAM for that resource's ARN (although I am not sure that I got the Gateway API Resource ARN correct as I couldn't find any documentation on how to set this value), however, I am still unable to access that end-point without an access token.

Does anyone have an idea of whether or not there is an additional step I need to take, or if there is something else I have done wrong?

Answer 1

您可以从控制台禁用任何授权和API密钥要求，如下所示：

此步骤必须应用于资源中的整个方法集（POST，PATCH，DELETE等）/some-public-resource。

单击方法请求链接（invokeworker2= some-public-resource）

然后，禁用授权和API密钥

就像我说的那样，您需要对资源中的每种方法都执行此操作/some-public-resource。

现在，您的资源/some-public-resource已打开，客户无需传递任何令牌即可进行授权。