bill
April 12, 2018, 10:54am
2
Thanks to post this update.
My understand is, serverless framework only takes care of lambda iam role and its policy in block of provider -> iamRoleStatements
If you need manage IAM role to API Gateway, you can directly copy/paste the sample codes from your URLs to Resources block, as normal cloudformation json/yaml codes.
Just to save people a few clicks.
At present cloudformation does not support apigateway resource policies.
The following issue has been created on serverless - you could subscribe to this to be notified when cloudformation supports it so someone is able to implement it in serverless.
opened 08:02PM - 20 Apr 18 UTC
closed 12:18AM - 03 Jul 18 UTC
enhancement
<!--
1. If you have a question and not a bug/feature request please ask it at h… ttp://forum.serverless.com
2. Please check if an issue already exists so there are no duplicates
3. Check out and follow our Guidelines: https://github.com/serverless/serverless/blob/master/CONTRIBUTING.md
4. Fill out the whole template so we have a good overview on the issue
5. Do not remove any section of the template. If something is not applicable leave it empty but leave it in the Issue
6. Please follow the template, otherwise we'll have to ask you to update it
-->
# This is a Feature Proposal
## Description
Recently API Gateway (April 2nd, 2018) started providing resource policy to handle each API. Which includes blacklisting IP or allowing denying IP.
This is currently only supported by the API Gateway API, AWS console, AWS SDK and not yet by CloudFormation, which I'm guessing is why it is not yet supported by Serverless.
[Announcement](https://aws.amazon.com/about-aws/whats-new/2018/04/amazon-api-gateway-supports-resource-policies/)
[Blog for console-based setup](https://lobster1234.github.io/2018/04/14/amazon-api-gateway-ip-whitelisting/)
Probably best to wait for CloudFormation to catch up on this so I'm just registering for a future task.
For feature proposals:
* IP Blacklisting or allowing a certain type of method. Basically IAM type policy but without creating IAM role/policy.
* Json input or parameter based information can be set up.
Note
** [Forum Question in relation](https://forum.serverless.com/t/api-gateway-resource-policy/4215
)
While the CF support is being developed is their a recommend way of implementing a resource policy after Serverless deploy has been executed?