Comments for Delete a Note

Chapter Comments
41

Hi, Thanks for the reply.

Essentially, I noticed that for the API test to pass, I needed to modify the Cognito policy you have provided by adjusting the endpoint from

"arn:aws:execute-api:YOUR_API_GATEWAY_REGION:*:YOUR_API_GATEWAY_ID/*/*/*"

To (The removed /*'s at the end)

"arn:aws:execute-api:YOUR_API_GATEWAY_REGION:*:YOUR_API_GATEWAY_ID/*"

This got the test to run. However, now that I am trying to use the delete not API I am getting a 500 response with a console error saying:

Failed to load resource: the server responded with a status of 500 () https://API-id.execute-api.us-east-1.amazonaws.com/prod/notes/note-id.

I am wondering if the policy, which only includes a single /* at the end, does not give permission to these ‘deeper’ paths which require the note-id to be called. However, I tried creating a policy which explicitly gives permission to each API endpoint using AWS’ policy creation website and ran into the same 500 failure. This makes me wonder if the error is coming from within the delete.js function because it is 500 and not 403, but I haven’t been able to find any issues. Anyways, that is just what I have tried but if you have any suggestions I would appreciate any help I can get! Thank you.

42

So this is the format btw,

arn:aws:execute-api:region:account-id:api-id/stage/METHOD_HTTP_VERB/Resource-path

Both /* and /*/*/* should work. These rules do not specify deeper paths. For all the paths we are using * anyway. Hope that make sense!