- 在main.tf文件中定义API Gateway的资源。以下是一个示例:
resource "aws_api_gateway_rest_api" "cors_api" {
name = "cors-api-example"
description = "An example API Gateway with CORS enabled"
}
resource "aws_api_gateway_resource" "cors_resource" {
rest_api_id = "${aws_api_gateway_rest_api.cors_api.id}"
parent_id = "${aws_api_gateway_rest_api.cors_api.root_resource_id}"
path_part = "cors"
}
resource "aws_api_gateway_method" "cors_options" {
rest_api_id = "${aws_api_gateway_rest_api.cors_api.id}"
resource_id = "${aws_api_gateway_resource.cors_resource.id}"
http_method = "OPTIONS"
response_parameters = {
"method.response.header.Access-Control-Allow-Methods" = "'GET,PUT,POST,DELETE'"
"method.response.header.Access-Control-Allow-Headers" = "'Content-Type,X-Amz-Date,Authorization,X-Api-Key,X-Amz-Security-Token'"
}
# Enable Mock integration
request_parameters {
"integration.request.header.Content-Type" = "'application/json'"
"integration.request.header.X-Amz-Invocation-Type" = "'Event'"
}
integration {
type = "MOCK"
passthrough_behavior = "WHEN_NO_TEMPLATES"
request_templates = {
"application/json" = "{ \"statusCode\": 200 }"
}
}
method_responses {
status_code = 200
response_parameters = {
"method.response.header.Access-Control-Allow-Methods" = true,
"method.response.header.Access-Control-Allow-Headers" = true
}
}
}
resource "aws_api_gateway_method" "cors_method" {
rest_api_id = "${aws_api_gateway_rest_api.cors_api.id}"
resource_id = "${aws_api_gateway_resource.cors_resource.id}"
http_method = "POST"
request_validator_id = "${aws_api_gateway_request_validator.cors_request_validator.id}"
integration {
type = "AWS_PROXY"
uri = "${var.lambda_function_invoke_arn}"
passthrough_behavior = "WHEN_NO_TEMPLATES"
http_method = "POST"
request_parameters = {
"integration.request.header.Content-Type" = "'application/json'"
}
}
method_responses {
status_code = "200"
}
}
resource "aws_api_gateway_request_validator" "cors_request_validator" {
name = "cors_request_validator"
rest_api_id = "${aws_api_gateway_rest_api.cors_api.id}"
validate_request_body = false
validate_request_parameters = false
}
resource "aws_lambda_permission" "cors_api_invoke_lambda_permission" {
statement_id = "AllowAPIGatewayInvoke"