---
title: "GET /default-authorizer"
method: GET
path: "/default-authorizer"
---

# GET /default-authorizer

`GET /default-authorizer`

Describes the default authorizer.

Requires permission to access the [DescribeDefaultAuthorizer](https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsiot.html#awsiot-actions-as-permissions) action.

## Response `200`

Success

- DescribeDefaultAuthorizerResponse
  - `authorizerDescription` object — The default authorizer's description.
    - `authorizerName` string — The authorizer name.
    - `authorizerArn` string — The authorizer ARN.
    - `authorizerFunctionArn` string — The authorizer's Lambda function ARN.
    - `tokenKeyName` string — The key used to extract the token from the HTTP headers.
    - `tokenSigningPublicKeys` object — The public keys used to validate the token signature returned by your custom authentication service.
    - `status` 'ACTIVE' | 'INACTIVE' — The status of the authorizer.
    - `creationDate` string, date-time — The UNIX timestamp of when the authorizer was created.
    - `lastModifiedDate` string, date-time — The UNIX timestamp of when the authorizer was last updated.
    - `signingDisabled` boolean — Specifies whether IoT validates the token signature in an authorization request.
    - `enableCachingForHttp` boolean — When <code>true</code>, the result from the authorizer’s Lambda function is cached for the time specified in <code>refreshAfterInSeconds</code>. The cached result is used while the device reuses the same HTTP connection.

## Other responses

- `480` — ResourceNotFoundException
- `481` — InvalidRequestException
- `482` — ThrottlingException
- `483` — UnauthorizedException
- `484` — ServiceUnavailableException
- `485` — InternalFailureException

---

[API](https://skmtc.net/aws/apis/iot.md) · [All operations](https://skmtc.net/aws/apis/iot/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/aws/iot/versions/deef5c4b09f0/schema)