create-lambda-authorizer

Generate a TypeScript Lambda Authorizer project with JWT validation and ABAC policies.

Updated Mar 23, 2026
One-click install
npx skills add https://github.com/tcelestino/softplan-engineering-skills --skill create-lambda-authorizer
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: create-lambda-authorizer
Source: https://github.com/tcelestino/softplan-engineering-skills/tree/main/skills/create-lambda-authorizer
Command: npx skills add https://github.com/tcelestino/softplan-engineering-skills --skill create-lambda-authorizer

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This skill provides a ready-to-implement Lambda Authorizer that validates JWTs via AWS Cognito, extracts tenant_id, and generates per-request ABAC policies.

Core Features & Use Cases

  • JWT validation using AWS Cognito
  • Tenant-aware ABAC policy generation
  • Scaffold production-ready project structure (src/, services/, utils/, and config)

Quick Start

Run the skill to scaffold a complete Lambda Authorizer project in svc-authorizer.

Frequently Asked Questions about create-lambda-authorizer

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I create a Lambda authorizer with ABAC policies for a multi-tenant API Gateway?

You can create a Lambda authorizer with ABAC policies by scaffolding a TypeScript project that validates JWTs via AWS Cognito, extracts tenant_id, and generates per-request authorization policies for protected endpoints.

How does a Lambda authorizer validate JWTs using AWS Cognito?

A Lambda authorizer validates JWTs using AWS Cognito by verifying the token signature and claims, extracting context like tenant_id, and mapping those claims to ABAC policy documents for API Gateway authorization.

Can I use TypeScript to build a Cognito JWT authorizer with tenant-aware policies?

Yes, you can use TypeScript to build a Cognito JWT authorizer. The skill generates a complete TypeScript project skeleton including services, utils, and config for tenant-aware ABAC policy generation.

What's the best way to implement per-request authorization across protected API endpoints?

The best way to implement per-request authorization is using a Lambda authorizer that applies ABAC policies. It intercepts requests, validates JWTs, and returns dynamically generated policy documents to API Gateway.

Do I need AWS Cognito to use ABAC policy generation in my Lambda authorizer?

Yes, this specific implementation uses AWS Cognito for JWT validation and context extraction. It relies on Cognito tokens to generate tenant-aware ABAC policies for your multi-tenant API Gateway.

What project structure is generated for a TypeScript Lambda authorizer?

The generated TypeScript Lambda authorizer project includes a production-ready structure with src/, services/, utils/, and config directories to separate token verification, context extraction, and policy building.