# WebFunctionAuthType

Authentication type for WebFunction domain configuration.

- Source: [`aws-lambda/lib/webfunction-endpoint.ts`](https://github.com/aws/aws-cdk/blob/v2.276.0/packages/aws-cdk-lib/aws-lambda/lib/webfunction-endpoint.ts#L40)
- Type last changed: v2.276.0 · 10 Nov 2026

## Example

```ts
import * as s3 from 'aws-cdk-lib/aws-s3';

declare const codeBucket: s3.IBucket;

new lambda.WebFunction(this, 'PerRegionApi', {
  code: lambda.WebFunctionCode.fromBucket(codeBucket, 'app.zip', 'version-id'),
  runtime: lambda.WebFunctionRuntime.NODEJS_24_X,
  defaultEndpointAuth: lambda.WebFunctionAuthType.IAM_AUTH,
  defaultEndpoint: {
    endpointLocation: lambda.WebFunctionEndpointLocation.perRegion(['us-east-1', 'us-west-2']),
  },
});
```

## Members

| Member | Description |
| --- | --- |
| `APPLICATION_MANAGED` | Authentication is managed by the application itself. |
| `IAM_AUTH` | Authentication using AWS IAM. |

## Referenced by

- [`IWebFunctionEndpoint`](/v2/docs/aws-cdk-lib.aws_lambda.IWebFunctionEndpoint).authType
- [`WebFunctionEndpoint`](/v2/docs/aws-cdk-lib.aws_lambda.WebFunctionEndpoint).authType
- [`WebFunctionEndpointAttributes`](/v2/docs/aws-cdk-lib.aws_lambda.WebFunctionEndpointAttributes).authType
- [`WebFunctionEndpointBase`](/v2/docs/aws-cdk-lib.aws_lambda.WebFunctionEndpointBase).authType
- [`WebFunctionEndpointOptions`](/v2/docs/aws-cdk-lib.aws_lambda.WebFunctionEndpointOptions).authType
- [`WebFunctionProps`](/v2/docs/aws-cdk-lib.aws_lambda.WebFunctionProps).defaultEndpointAuth