Discussion on: Basic Authentication with Lambda@Edge

function handler (event) {
  var request = event.request;
  var headers = request.headers;
  var authString = "Basic BASE64_OF_USERNAME:PASSWORD";

  // If authorization header isn't present or doesn't match expected authString, deny the request
  if (
    typeof headers['authorization'] == 'undefined' ||
    headers['authorization'].value !== authString
  ) {
      return {
        statusCode: 401,
        statusDescription: 'Unauthorized',
        headers: {
            'www-authenticate': { value: 'Basic' }
        },
      };
  }

  return request;
};