Does AWS API Gateway Support Basic Authorization?

Question

Is there a way to use Basic authentication rather than AWS4-HMAC-SHA256 authentication with the AWS API Gateway Service? I need to support a system that only supports webhook calls with Basic Authentication.

Solution 1

You just need to modify the 401 Unauthorized response template so that it contains the WWW-Authenticate header set to 'Basic'. Apart from that, you'll need to create a custom authorizer that verifies that the provided credentials are correct. You can find more info here

Solution 2

You can configure an API Gateway to support Basic auth, and API Gateway supports integrations with any AWS service.

Setting up Basic auth in API Gateway requires a few steps. Check this post and search down to BobK@AWS response: https://forums.aws.amazon.com/thread.jspa?messageID=799091&tstart=0