HACKER Q&A
📣 hhthrowaway1230

What internal tooling does AWS use for their API and Authorization?


Is there any documentation or sources on how they build their apis and authorization layer? It seems that its pretty consistent and follows conventions in generating:

- Generated cli tools

- Generated client libraries

- Documentation for said libraries

- Conventions for endpoints and hosting

- Authorisation via policies

Also they seem to follow an RPC style convention. Any leads on a framework that does exactly this in a consistent way so you can build your own kind of services in a similar manner

Thank you


  👤 wizwit999 Accepted Answer ✓
They have a well developed internal system, recently theyve been moving to Smithy which is Open source.

https://awslabs.github.io/smithy/2.0/index.html