Custom Authorizor question

[bill]

What’s the api gateway request? Do you mean the method, such as PUT/POST/DELETE? or the paths that admin users can access specified?

This is the template for the methodArn you can define in policy when calls custom authorizer handler (Amazon API Gateway)

 "methodArn":"arn:aws:execute-api:<regionId>:<accountId>:<apiId>/<stage>/<method>/<resourcePath>"

So what you can define for different users are two parts only:

method - such as GET/PUT/POST/DELETE, etc
resourcePath -  define in apigateway path

And read this document as well to see if it is helpful for your question:

Need help to understand how cache works with request type

Yes, I get something by myself. For question #1, my understanding is, I have to customize the policies to nominate allowed endpoints when validate in authorizer for that token owner. For example, if that Authorization token owner has only permission to access endpoint 1, 2, 5, this is the policy I need to generate, which allow all methods. arn:aws:execute-api:ap-southeast-2:<account_id>:<restapi_id>/dev/*/endpoint-1/*" arn:aws:execute-api:ap-southeast-2:<account_id>:<restapi_id>/dev/*/endpoin…

Introducing custom authorizers in Amazon API Gateway | Amazon Web Services