Update template.yml (#97)

fix transport headers

Signed-off-by: James Pether Sörling <pethers@users.noreply.github.com>

Author: pethers

cloudformation/template.yml

@@ -571,6 +571,12 @@ Resources:
         IntegrationHttpMethod: POST
         IntegrationResponses:
           - StatusCode: 200
+            ResponseTemplates:
+              application/json: ""
+            ResponseParameters:
+              method.response.header.Strict-Transport-Security: "'max-age=31536000; includeSubDomains'"
+              method.response.header.X-Content-Type-Options: "'nosniff'"
+              method.response.header.Cache-Control: "'no-store, no-cache, must-revalidate, private'"
         Type: AWS
         Uri: !Sub 'arn:aws:apigateway:${AWS::Region}:lambda:path/2015-03-31/functions/${Lambda.Arn}/invocations'
 #      RequestValidatorId: !Ref ApiRequestValidator
@@ -579,6 +585,12 @@ Resources:
           !Ref RequestModel
       MethodResponses:
         - StatusCode: 200
+          ResponseModels:
+            application/json: Empty
+          ResponseParameters:
+            method.response.header.Strict-Transport-Security: true
+            method.response.header.X-Content-Type-Options: true
+            method.response.header.Cache-Control: true
       OperationName: 'lambda'
       ResourceId: !Ref ApiResource
       RestApiId: !Ref RestApi