AWS Lambda function URLs: Built-in HTTPS endpoints

Re:AWS Lambda function URLs: Built-in HTTPS endpoints by pojzon on Wednesday April 06, 2022 @06:32PM (#30938297)

Are those function urls backed by WAF and AWS Shield ?

If not -> get prepared for huge bill of ddosed function invocations.

I hope we can at least attach something to those urls.

[ Parent | on HN ]

Re:AWS Lambda function URLs: Built-in HTTPS endpoints by recuter on Wednesday April 06, 2022 @07:55PM (#30938962)

You can and should limit the number of parallel invocations and as a result your maximum bill.

If you want ddos protection and proper rate limiting amazon will happily charge you for it several different ways. Maybe you can hide these urls behind cloudflare if you're penny pinching..

[ Parent | on HN ]

Re:AWS Lambda function URLs: Built-in HTTPS endpoints by icecap12 on Wednesday April 06, 2022 @10:11PM (#30939890)

I was thinking the same. What we have here is a security nightmare. You have executable code on globally unique URLs with no protective mechanisms in front of it except for the ability to do IAM. Yikes.

[ Parent | on HN ]

Re:AWS Lambda function URLs: Built-in HTTPS endpoints by joe_hoyle on Thursday April 07, 2022 @02:23AM (#30941240)

Is it not possible to set the lambda url has an origin in CloudFront and get WAF protection that way?

For all production workloads we typically have cloudfront in front of everything.

[ Parent | on HN ]

Re:AWS Lambda function URLs: Built-in HTTPS endpoints by astral303 on Wednesday April 06, 2022 @11:51PM (#30940428)

Not for WAF. The original article states that you must use API Gateway if you want AWS WAF.

[ Parent | on HN ]