Ability to set the awsSigV4 to use API Gateway as the Service Scope

[hv-rruiz]

Hi all!

I wanted to ask if it's possible to scope the awsSigV4 object w/in the DataPlaneClient to something other than rum. The service attribute only allows rum.

I've noticed in the documentation it's possible to set an endpoint to an API gateway proxy. However the permissions won't quite work with the client to only give the client the ability to call the API because this signature is scoped to rum.

We wanted to set the guest role arn to have execute-api permissions to our API. Then from there we can forward it along to RUM.

Thank you!

[qhanam]

Hi! The service argument for sigv4 isn't configurable in the web client right now. You could fork the web client and change it and we could potentially upstream it later if it's useful.

Do you need the data between the web client and API gateway to be signed? If you don't, you could provide dummy credentials via setAwsCredentials and strip the sigv4 header in API gateway.

[nikevp]

+1, signing with execute-api would make life easier.