Resource: awsApiGatewayAuthorizer

/*Provider bindings are generated by running cdktf get.
See https://cdk.tf/provider-generation for more details.*/
import * as aws from "./.gen/providers/aws";
const awsApiGatewayRestApiDemo = new aws.apiGatewayRestApi.ApiGatewayRestApi(
  this,
  "demo",
  {
    name: "auth-demo",
  }
);
const awsIamRoleInvocationRole = new aws.iamRole.IamRole(
  this,
  "invocation_role",
  {
    assumeRolePolicy: "${data.aws_iam_role_policy_document.assume_role.json}",
    name: "api_gateway_auth_invocation",
    path: "/",
  }
);
const dataAwsIamPolicyDocumentLambdaAssumeRole =
  new aws.dataAwsIamPolicyDocument.DataAwsIamPolicyDocument(
    this,
    "lambda_assume_role",
    {
      statement: [
        {
          actions: ["sts:AssumeRole"],
          effect: "Allow",
          principals: [
            {
              identifiers: ["lambda.amazonaws.com"],
              type: "Service",
            },
          ],
        },
      ],
    }
  );
new aws.dataAwsIamRolePolicyDocument.DataAwsIamRolePolicyDocument(
  this,
  "invocation_assume_role",
  {
    statement: [
      {
        actions: ["sts:AssumeRole"],
        effect: "Allow",
        principals: [
          {
            identifier: ["apigateway.amazonaws.com"],
            type: "Service",
          },
        ],
      },
    ],
  }
);
const awsIamRoleLambda = new aws.iamRole.IamRole(this, "lambda", {
  assumeRolePolicy: dataAwsIamPolicyDocumentLambdaAssumeRole.json,
  name: "demo-lambda",
});
const awsLambdaFunctionAuthorizer = new aws.lambdaFunction.LambdaFunction(
  this,
  "authorizer",
  {
    filename: "lambda-function.zip",
    functionName: "api_gateway_authorizer",
    handler: "exports.example",
    role: awsIamRoleLambda.arn,
    sourceCodeHash: '${filebase64sha256("lambda-function.zip")}',
  }
);
const dataAwsIamPolicyDocumentInvocationPolicy =
  new aws.dataAwsIamPolicyDocument.DataAwsIamPolicyDocument(
    this,
    "invocation_policy",
    {
      statement: [
        {
          actions: ["lambda:InvokeFunction"],
          effect: "Allow",
          resources: [awsLambdaFunctionAuthorizer.arn],
        },
      ],
    }
  );
const awsApiGatewayAuthorizerDemo =
  new aws.apiGatewayAuthorizer.ApiGatewayAuthorizer(this, "demo_7", {
    authorizerCredentials: awsIamRoleInvocationRole.arn,
    authorizerUri: awsLambdaFunctionAuthorizer.invokeArn,
    name: "demo",
    restApiId: awsApiGatewayRestApiDemo.id,
  });
/*This allows the Terraform resource name to match the original name. You can remove the call if you don't need them to match.*/
awsApiGatewayAuthorizerDemo.overrideLogicalId("demo");
const awsIamRolePolicyInvocationPolicy = new aws.iamRolePolicy.IamRolePolicy(
  this,
  "invocation_policy_8",
  {
    name: "default",
    policy: dataAwsIamPolicyDocumentInvocationPolicy.json,
    role: awsIamRoleInvocationRole.id,
  }
);
/*This allows the Terraform resource name to match the original name. You can remove the call if you don't need them to match.*/
awsIamRolePolicyInvocationPolicy.overrideLogicalId("invocation_policy");

$ terraform import aws_api_gateway_authorizer.authorizer 12345abcde/example