---
title: "POST /authorizer/{authorizerName}"
method: POST
path: "/authorizer/{authorizerName}"
---

# POST /authorizer/{authorizerName}

`POST /authorizer/{authorizerName}`

Creates an authorizer.

Requires permission to access the [CreateAuthorizer](https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsiot.html#awsiot-actions-as-permissions) action.

## Path parameters

- `authorizerName` string, required

## Request body

- object
  - `authorizerFunctionArn` string, required — The ARN of the authorizer's Lambda function.
  - `tokenKeyName` string — The name of the token key used to extract the token from the HTTP headers.
  - `tokenSigningPublicKeys` object — The public keys used to verify the digital signature returned by your custom authentication service.
  - `status` 'ACTIVE' | 'INACTIVE' — The status of the create authorizer request.
  - `tags` Tag[] — <p>Metadata which can be used to manage the custom authorizer.</p> <note> <p>For URI Request parameters use format: ...key1=value1&amp;key2=value2...</p> <p>For the CLI command-line parameter use format: &amp;&amp;tags "key1=value1&amp;key2=value2..."</p> <p>For the cli-input-json file use format: "tags": "key1=value1&amp;key2=value2..."</p> </note>
    - `Key` string, required — The tag's key.
    - `Value` string — The tag's value.
  - `signingDisabled` boolean — Specifies whether IoT validates the token signature in an authorization request.
  - `enableCachingForHttp` boolean — <p>When <code>true</code>, the result from the authorizer’s Lambda function is cached for clients that use persistent HTTP connections. The results are cached for the time specified by the Lambda function in <code>refreshAfterInSeconds</code>. This value does not affect authorization of clients that use MQTT connections.</p> <p>The default value is <code>false</code>.</p>

## Response `200`

Success

- CreateAuthorizerResponse
  - `authorizerName` string — The authorizer's name.
  - `authorizerArn` string — The authorizer ARN.

## Other responses

- `480` — ResourceAlreadyExistsException
- `481` — InvalidRequestException
- `482` — LimitExceededException
- `483` — ThrottlingException
- `484` — UnauthorizedException
- `485` — ServiceUnavailableException
- `486` — InternalFailureException

---

[API](https://skmtc.net/aws/apis/iot.md) · [All operations](https://skmtc.net/aws/apis/iot/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/aws/iot/versions/deef5c4b09f0/schema)