in blueprints/dotnet/src/APIGatewayAuthorizerHandler/AuthPolicyBuilder.cs [98:131]
public AuthPolicy Build()
{
var statements = new List<Statement>();
foreach (var method in _allowMethods)
{
statements.Add(new Statement
{
Effect = Effect.Allow.ToString(),
Resource = method.ArnResource,
Action = "execute-api:Invoke",
Condition = method.Conditions
});
}
foreach (var method in _denyMethods)
{
statements.Add(new Statement
{
Effect = Effect.Deny.ToString(),
Resource = method.ArnResource,
Action = "execute-api:Invoke",
Condition = method.Conditions
});
}
return new AuthPolicy
{
PrincipalId = PrincipalId,
PolicyDocument = new PolicyDocument
{
Version = PolicyVersion,
Statement = statements
}
};
}