Serverless Framework Guide: API Gateway , AWS & Node.js

Learn identity and access management in AWS, defining who can access resources and what actions they may perform with users, groups, roles, and policies, including temporary permissions.

Learn how AWS IAM manages identities with users, groups, and policies. Create users, attach policies directly or to groups, and grant administrator access through an admins group.

Explore the three main AWS policy types: identity-based policies attached to people or groups, resource-based policies on resources, and permissions boundaries that cap allowed actions.

Install the AWS CLI to interact with Amazon Web Services from your terminal, and verify the installation by checking the version on Linux, macOS, or Windows.

Configure the AWS CLI and IAM by creating an admin user group with the administrator policy, generating access keys including secret access keys, and validating CLI access to AWS resources.

Demonstrates task-based access in IAM by using specific policies attached to groups, such as Amazon S3 Full Access, instead of granting administrator access to all resources.

Apply the principle of least privilege by granting only the permissions needed for each task, avoiding administrator access for users who only perform S3 uploads or manage S3 resources.

Install Node.js to enable the serverless framework, obtain npm access, download and install Node.js from the browser, and verify the installation with node -v.

Open your terminal or command prompt and run npm install -g serverless to install the serverless framework globally.

Create your first lambda function using the serverless framework. Discover how to apply serverless concepts in a practical, beginner-friendly section of the course.

Create a serverless project with the serverless framework using AWS Node.js http API, name the project grid, and open it in VS Code.

Discover how serverless.yml configures a Node.js 20 AWS deployment, linking your service to an organization and naming resources, with a hello function triggered by HTTP GET request to /.

Use the serverless.yml configuration with the serverless framework to automatically provision and connect AWS resources, enabling event-driven apps and faster development without manual infrastructure management.

Update the serverless.yml runtime to match the current AWS Lambda Node.js version, ensuring your project uses the latest supported Node.js and stays aligned with AWS expectations.

Deploy the grid service using serverless deploy, configure the region in serverless.yml, and redeploy to update the endpoint and hello function that returns 200.

Deploy a single function in serverless by updating the handler and running serverless deploy function --function hello, delivering faster, smaller deployments for the updated function.

Remove AWS resources with the serverless framework by running serverless remove and delete manually created objects, such as remaining S3 bucket items, to complete cleanup.

Rename the lambda function from Ello to grid by updating handler.js and serverless.yml, redeploy with serverless, and verify the grid function is deployed successfully.

Explore how Amazon API gateway, a fully managed service, routes client requests to backend services like AWS Lambda or DynamoDB, ensuring secure, scalable API communication.

Learn how an API gateway endpoint, a web-accessible URL, exposes the grids functionality and triggers the grid Lambda function, handling request routing, security, and scaling between users and back-end services.

Explore API gateway methods that define request types like get, post, put, and delete, and how /greet uses get to route to a greet Lambda function and return a greeting.

Define an async lambda function that exports for reuse, parses JSON from the event, validates a name, returns a personalized greeting, and handles 400 bad requests and 500 server errors.

Define a new function in serverless.yml under the functions section, ensure proper indentation, set the handler to another grid, and configure http api events for get and post before deploying.

Deploy api gateway functions with the serverless framework to create get and post endpoints. Test with Thunder Client, then update a single function with serverless deploy --function and verify greeting.

Learn how API gateway response codes steer client-server communication, including 200 OK, 400 bad request, and 500 internal server error, with concrete examples.

CloudFormation automates turning your serverless.yml configurations into AWS resources such as Lambda functions, API Gateway endpoints, and IAM roles, enabling consistent, automated deployment with stacks.

Convert serverless.yml into an AWS CloudFormation template to automate resource creation, including Lambda functions, API Gateway endpoints, and IAM roles, ensuring consistent deployments across AWS.

Monitor AWS resources with Amazon CloudWatch by collecting logs and metrics. Track API response times and lambda execution duration, debug issues via logs, and set alerts for notifications.

Navigate the AWS management console to CloudWatch, inspect log groups and function logs, deploy updates, and diagnose issues such as internal server errors and syntax issues.

Explore Amazon Cognito, an AWS service that manages user accounts, sign up and sign in, password recovery, and MFA, with federated identities and sign-in with Google, Facebook or Apple.

Understand how Amazon Cognito's client ID identifies your app and how the client secret adds a security layer, together protecting your requests.

Create an authentication service project with the Serverless Framework to define functions and resources, deploy to AWS with Node.js HTTP API, and manage sign up, sign in, and sign out.

Configure Amazon Cognito to enable email-based sign up, sign in, and password reset by creating a user directory in the AWS console with email and name as required attributes.

Create a signup lambda in a serverless app by wiring Cognito identity provider client to sign up users, extracting email, full name, and password from the event body.

Expose the sign-up lambda via API Gateway, enabling a post request to /sign-up that triggers Cognito to create a new user.

Deploy the signup function to AWS us-east-1 with the serverless framework and node.js 22, exposing a post endpoint via API gateway.

Implement an AWS Lambda function to verify user emails in Amazon Cognito using an OTP, parse the request body, and send a confirm sign up command with the client ID.

Configure an api gateway route to trigger the confirm signup function in a serverless app, defining the function, http api event, path /confirm-sign-up, and post method.

Deploy the signup and confirm signup endpoints with serverless, test signup with thunder client, retrieve the confirmation code from Gmail, and confirm the user in Cognito.