Limits the returned data to the authorized user
The snippet looks up the authorized user in the context.claims data from API Gateway. The returned user must match the owner which is the Global Secondary Index (GSI)
Limit returned data to authorized user
#set( $pageKey = $input.params('pageKey'))
{
"TableName": "myTable",
"IndexName":"OwnerIndex",
"KeyConditionExpression": "#n_owner = :v_owner",
"ExpressionAttributeValues": {
":v_owner": {"S": "$context.authorizer.claims.email"}
},
"ExpressionAttributeNames": {"#n_owner": "owner"}
}
Created by:
