Name		Name	Last commit message	Last commit date
parent directory ..
README.md		README.md
app.py		app.py
cdk.json		cdk.json
requirements.txt		requirements.txt

README.md

Access Control Example

This example demonstrates how to configure access control for the webhook and setup functions.

What This Example Shows

How to use API Gateway instead of Lambda URLs for better security
How to restrict webhook access to GitHub.com IPs
How to disable setup access after initial setup

Access Types

webhookAccess: Controls who can send webhooks (default: Lambda URL, open to all)
setupAccess: Controls who can access the setup wizard (default: Lambda URL, open to all)

Security Best Practices

Use API Gateway with IP restrictions for webhook access
Disable setup access after initial setup is complete

Setup

Deploy the stack: cdk deploy
Follow the setup instructions in the main README.md to configure GitHub integration
After setup is complete, the setup function will be inaccessible
Use the codebuild label in your workflows