[Resource Type] - [Enhancement] - Removing authorizer from AWS::ApiGatewayV2::Route requires setting AuthorizerId to "NONE""

[flostadler]

Name of the resource

AWS::ApiGatewayV2::Route

Resource name

No response

Description

Removing an existing authorizer from an AWS::ApiGatewayV2::Route does not work by just removing the AuthorizationType and AuthorizerId. When doing that the CloudFormation or CloudControl operations are successful, but the existing authorizer stays attached to the route.

Instead, users need to remove the AuthorizerId and set AuthorizationType to "NONE".

Other Details

Users across different ecosystems seem to be running into this:

• Unable to Detach Authorizer from HTTP API Route in AWS API Gateway pulumi/pulumi-aws-native#1822
• aws_apigatewayv2.CfnRoute: CDK doesn't detach authorizer properly aws/aws-cdk#20695