This example demonstrates how to configure access control for the webhook and setup functions.
- How to use API Gateway instead of Lambda URLs for better security
- How to restrict webhook access to GitHub.com IPs
- How to disable setup access after initial setup
- webhookAccess: Controls who can send webhooks (default: Lambda URL, open to all)
- setupAccess: Controls who can access the setup wizard (default: Lambda URL, open to all)
- Use API Gateway with IP restrictions for webhook access
- Disable setup access after initial setup is complete
- Deploy the stack:
cdk deploy - Follow the setup instructions in the main README.md to configure GitHub integration
- After setup is complete, the setup function will be inaccessible
- Use the
codebuildlabel in your workflows