fix: CWE-285 in API Gateway (#1017)

konippi · web-flow · commit 798d7a220f06 · 2025-04-21T12:46:39.000+09:00
diff --git a/packages/cdk/lib/construct/api.ts b/packages/cdk/lib/construct/api.ts
@@ -674,6 +674,7 @@ export class Api extends Construct {
         allowMethods: Cors.ALL_METHODS,
       },
       cloudWatchRole: true,
+      defaultMethodOptions: commonAuthorizerProps,
     });
 
     api.addGatewayResponse('Api4XX', {
