ipa-stack-backend

Provision a serverless AWS backend with Lambda, API Gateway v2, and Cognito JWT authorization.

1|1|Updated Apr 23, 2026
One-click install
npx skills add https://github.com/aws-samples/sample-innovation-patterns --skill ipa-stack-backend
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: ipa-stack-backend
Source: https://github.com/aws-samples/sample-innovation-patterns/tree/main/.claude/skills/ipa-stack-backend
Command: npx skills add https://github.com/aws-samples/sample-innovation-patterns --skill ipa-stack-backend

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This Skill removes the manual setup and error-prone wiring of a production-ready backend by generating and deploying the required AWS resources as a cohesive CloudFormation stack.

Core Features & Use Cases

  • Backend tier provisioning: Deploys Lambda behind API Gateway v2 with JWT authentication via Cognito.
  • Data layer setup (feature-flagged): Optionally creates a DynamoDB table (e.g., for demo feature flag use cases) with least-privilege IAM access.
  • Operational readiness: Creates CloudWatch dashboards/alarms and standardizes CORS using an AllowedOrigin parameter updated post-deploy.

Use case: Stand up the backend for a serverless web app where the frontend calls a secured HTTP API and optionally persists data in DynamoDB.

Quick Start

Ask the agent to run ipa-stack-backend with your app namespace, environment, image ECR URI, Cognito issuer/audience values, and set EnablePassengersTable=true if you want the DynamoDB table.

Frequently Asked Questions about ipa-stack-backend

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I deploy a serverless backend with API Gateway and Cognito JWT authorization?

To deploy a serverless backend with API Gateway and Cognito JWT authorization, you can use a CloudFormation stack that provisions Lambda functions behind API Gateway v2 and configures Cognito issuer and audience parameters for secure HTTP API access.

What is the best way to provision a DynamoDB table for a serverless application using CloudFormation?

Provisioning a DynamoDB table for a serverless application using CloudFormation involves using feature-flagged conditional resource creation, enabling an optional table parameter like EnablePassengersTable to deploy the data layer with least-privilege IAM access.

Can I configure CORS and CloudWatch observability for my Lambda backend in one deployment?

Yes, you can configure CORS and CloudWatch observability for your Lambda backend in one deployment by standardizing CORS with an AllowedOrigin parameter updated post-deploy and creating CloudWatch dashboards and alarms within the same CloudFormation stack.

Do I need a CloudFormation template with named IAM capabilities to deploy a serverless backend stack?

Yes, you need a CloudFormation template with named IAM capabilities to deploy a serverless backend stack, requiring parameterized image, auth, and settings inputs along with conditional resource creation based on feature flags for environment-specific deployments.

How do I stand up a backend for a full-stack AWS web app with secured HTTP APIs?

To stand up a backend for a full-stack AWS web app with secured HTTP APIs, deploy a cohesive CloudFormation stack providing Lambda compute, API Gateway v2 routing, Cognito JWT authentication, and optional DynamoDB persistence for data-backed endpoints.