create-lambda-authorizer

Generate a TypeScript Lambda Authorizer project with JWT validation and ABAC policies.

Updated Mar 23, 2026
One-click install
npx skills add https://github.com/tcelestino/softplan-engineering-skills --skill create-lambda-authorizer
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: create-lambda-authorizer
Source: https://github.com/tcelestino/softplan-engineering-skills/tree/main/skills/create-lambda-authorizer
Command: npx skills add https://github.com/tcelestino/softplan-engineering-skills --skill create-lambda-authorizer

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This skill provides a ready-to-implement Lambda Authorizer that validates JWTs via AWS Cognito, extracts tenant_id, and generates per-request ABAC policies.

Core Features & Use Cases

  • JWT validation using AWS Cognito
  • Tenant-aware ABAC policy generation
  • Scaffold production-ready project structure (src/, services/, utils/, and config)

Quick Start

Run the skill to scaffold a complete Lambda Authorizer project in svc-authorizer.

Frequently Asked Questions about create-lambda-authorizer

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I create a Lambda authorizer with ABAC policies for a multi-tenant API Gateway?▼

You can create a Lambda authorizer with ABAC policies by scaffolding a TypeScript project that validates JWTs via AWS Cognito, extracts tenant_id, and generates per-request authorization policies for protected endpoints.

How does a Lambda authorizer validate JWTs using AWS Cognito?▼

A Lambda authorizer validates JWTs using AWS Cognito by verifying the token signature and claims, extracting context like tenant_id, and mapping those claims to ABAC policy documents for API Gateway authorization.

Can I use TypeScript to build a Cognito JWT authorizer with tenant-aware policies?▼

Yes, you can use TypeScript to build a Cognito JWT authorizer. The skill generates a complete TypeScript project skeleton including services, utils, and config for tenant-aware ABAC policy generation.

What's the best way to implement per-request authorization across protected API endpoints?▼

The best way to implement per-request authorization is using a Lambda authorizer that applies ABAC policies. It intercepts requests, validates JWTs, and returns dynamically generated policy documents to API Gateway.

Do I need AWS Cognito to use ABAC policy generation in my Lambda authorizer?▼

Yes, this specific implementation uses AWS Cognito for JWT validation and context extraction. It relies on Cognito tokens to generate tenant-aware ABAC policies for your multi-tenant API Gateway.

What project structure is generated for a TypeScript Lambda authorizer?▼

The generated TypeScript Lambda authorizer project includes a production-ready structure with src/, services/, utils/, and config directories to separate token verification, context extraction, and policy building.