ipa-stack-backend

Provision a serverless AWS backend with Lambda, API Gateway v2, and Cognito JWT authorization.

1|1|Updated Apr 23, 2026
One-click install
npx skills add https://github.com/aws-samples/sample-innovation-patterns --skill ipa-stack-backend
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: ipa-stack-backend
Source: https://github.com/aws-samples/sample-innovation-patterns/tree/main/.claude/skills/ipa-stack-backend
Command: npx skills add https://github.com/aws-samples/sample-innovation-patterns --skill ipa-stack-backend

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This Skill removes the manual setup and error-prone wiring of a production-ready backend by generating and deploying the required AWS resources as a cohesive CloudFormation stack.

Core Features & Use Cases

  • Backend tier provisioning: Deploys Lambda behind API Gateway v2 with JWT authentication via Cognito.
  • Data layer setup (feature-flagged): Optionally creates a DynamoDB table (e.g., for demo feature flag use cases) with least-privilege IAM access.
  • Operational readiness: Creates CloudWatch dashboards/alarms and standardizes CORS using an AllowedOrigin parameter updated post-deploy.

Use case: Stand up the backend for a serverless web app where the frontend calls a secured HTTP API and optionally persists data in DynamoDB.

Quick Start

Ask the agent to run ipa-stack-backend with your app namespace, environment, image ECR URI, Cognito issuer/audience values, and set EnablePassengersTable=true if you want the DynamoDB table.

Frequently Asked Questions about ipa-stack-backend

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I deploy a serverless backend with API Gateway and Cognito JWT authorization?▼

To deploy a serverless backend with API Gateway and Cognito JWT authorization, you can use a CloudFormation stack that provisions Lambda functions behind API Gateway v2 and configures Cognito issuer and audience parameters for secure HTTP API access.

What is the best way to provision a DynamoDB table for a serverless application using CloudFormation?▼

Provisioning a DynamoDB table for a serverless application using CloudFormation involves using feature-flagged conditional resource creation, enabling an optional table parameter like EnablePassengersTable to deploy the data layer with least-privilege IAM access.

Can I configure CORS and CloudWatch observability for my Lambda backend in one deployment?▼

Yes, you can configure CORS and CloudWatch observability for your Lambda backend in one deployment by standardizing CORS with an AllowedOrigin parameter updated post-deploy and creating CloudWatch dashboards and alarms within the same CloudFormation stack.

Do I need a CloudFormation template with named IAM capabilities to deploy a serverless backend stack?▼

Yes, you need a CloudFormation template with named IAM capabilities to deploy a serverless backend stack, requiring parameterized image, auth, and settings inputs along with conditional resource creation based on feature flags for environment-specific deployments.

How do I stand up a backend for a full-stack AWS web app with secured HTTP APIs?▼

To stand up a backend for a full-stack AWS web app with secured HTTP APIs, deploy a cohesive CloudFormation stack providing Lambda compute, API Gateway v2 routing, Cognito JWT authentication, and optional DynamoDB persistence for data-backed endpoints.