As an App/API Developer,

I want to quickly implement an application on multiple cloud provider's services (e.g., AWS Lambda, S3, SQS) using a reusable library(nginx-aws-signature) without learning and implementing how to sign API requests. So I can focus on only implementing business logic.

Acceptance Criteria:

• Implement common AWS Signature library by refactoring nginx-s3-gateway.
  • Remove S3 specific logic.
  • Support Signature Version 2 process for the existing services.
  • Support Signature Version 4 process.
• Get temporary security credentials
  • IAM role authentication for service accounts
  • Direct environment variables(e.g. AWS_SESSION_TOKEN) based authentication
• Support NGINX OSS/Plus

As a Product Manager,

I want customers to use NGINX Lambda gateway to securely expose their services as API.

Because customers who are running their services on Serverless platform are increasing, as the customers don’t want to manage the application server infrastructure. AWS Lambda is popular choice for AWS users which helps customers to run their services developed in the different programming languages (Go, Node.JS, Python, Java). There are increasing asks from customers to protect the services hosted in AWS Lambda.

As a Backend Engineer,

I want to make sure the library of nginx-aws-signature is interoperable with nginx-s3-gateway prior to integrating with nginx-lambda-gateway. Because nginx-aws-signature is the common library which is refactored from nginx-s3-gateway, and nginx-aws-signature should work with new library of nginx-aws-signature. So it will save time for testing when integrating with nginx-lambda-gateway.

AC:

• Refactor nginx-s3-gateway by integrating with nginx-aws-signature.
• Refactor unit test of nginx-s3-gateway.
• Refactor integration test of nginx-s3-gateway.
• Refactor installation scripts for Docker containers.

As an API/App Developer,

I want to make sure any change does not block the existing features of nginx-aws-signature library based on test framework. In the meantime, I want to ensure that it is always interoperable with other module such as nginx-s3-gateway and nginx-lambda-gateway.

AC:

• Implement unit test framework by refactoring nginx-s3-gateway/test/unit.
• Implement integration test framework by refactoring nginx-s3-gateway/test/integration.
• Local test framework based on Docker containers by refactoring nginx-s3-gateway/docker-compose