How to setup backend authentication in ApiGatway v2 (Websocket)

Question

I have an AWS ApiGateway v2 websocket api that sends request to a microservice (deployed on Kubernetes not lambda) using a HTTP integration.

This is working, but now I need to add authentication between the ApiGatway and the microservice. I do not want to authentication for the websocket connection, just the communication between the ApiGateway and microservice.

client <- wss -> api gateway <- http -> microservice

client<->api gateway // no auth needed
api gateway<->microservice // auth required

I control the microservice so I can change how the authentication mechanism works.

ronaldtf · Answer

You can configure a secure connection between the backend and the API Gateway by following these instructions: https://docs.aws.amazon.com/apigateway/latest/developerguide/getting-started-client-side-ssl-authentication.html

How to setup backend authentication in ApiGatway v2 (Websocket)

Relevant content