[Node.js] [AWS SDK V3] APIGatewayのIAM認証へSigV4署名ヘッダを作成してリクエストする

npm i @aws-sdk/protocol-http @aws-sdk/signature-v4 @aws-sdk/credential-provider-node @aws-crypto/sha256-universal undici

import { HttpRequest } from '@aws-sdk/protocol-http';
import { SignatureV4 } from '@aws-sdk/signature-v4';
import { Sha256 } from '@aws-crypto/sha256-universal';
import { defaultProvider } from '@aws-sdk/credential-provider-node';
import { request } from 'undici';

const main = async () => {
  const apiUrl = new URL('https://XXXXXXXX.execute-api.ap-northeast-1.amazonaws.com/api/');
  const signatureV4 = new SignatureV4({
    service: 'execute-api',
    region: 'ap-northeast-1',
    credentials: defaultProvider(),
    sha256: Sha256,
  });
  const httpRequest = new HttpRequest({
    headers: {
      'content-type': 'application/json',
      host: apiUrl.hostname,
    },
    hostname: apiUrl.hostname,
    method: 'POST',
    path: apiUrl.pathname,
  });

  const signedRequest = await signatureV4.sign(httpRequest);

  console.log({ signedRequest });

  const response = await request(apiUrl.toString(), {
    headers: signedRequest.headers,
    method: 'POST',
  });
  console.log({
    statusCode: response.statusCode,
    body: await response.body.json(),
  });
};

main();

  const signatureV4 = new SignatureV4({
    service: 'execute-api',
    region: 'ap-northeast-1',
-   credentials: defaultProvider(),
+   credentials: {
+     accessKeyId: 'XXXXXXXXX',
+     secretAccessKey: 'XXXXXXXXX',
+   },
    sha256: Sha256,
  });