Is there an easy way to link AWS Cloudfront authorisation to Google Workspaces?
I'm trying to achieve single sign on to a Cloudfront hosted static website such that anyone with a corporate email address (from google workspaces) can sign in.
What I understand so far is that something like this should be achievable via Lambda@Edge dialling out to Google OAuth 2.0.
But at this point the trail goes cold. I'm struggling to find that missing link of a working Lambda@Edge to connect with google authentication.
I've seen a number of anecdotal reports that this is possible, but none with working examples.