import { APIGatewayAuthorizerResult } from 'aws-lambda';

type DenyAccessFromAuthorizerArgs = {
  methodArn: string;
};

export const denyAccessFromAuthorizer = ({ methodArn }: DenyAccessFromAuthorizerArgs): APIGatewayAuthorizerResult => ({
  principalId: 'unknown',
  policyDocument: {
    Version: '2012-10-17',
    Statement: [
      {
        Action: 'execute-api:Invoke',
        Effect: 'Deny',
        Resource: methodArn,
      },
    ],
  },
  context: {},
});