How do I authorize access to API Gateway APIs using custom scopes in Amazon Cognito?

Muthu, an AWS Cloud Support Engineer, shows you how to authorize access to API Gateway APIs using custom scopes in Amazon Cognito.

[cristiantala]

Thanks, I am interested in knowing if I can do it without an UI in order to generate the JWT from a machine. Any suggestions ?

[juancpgo]

I need to set custom scopes per user, and not just per user pool. Each user has its own particular set of allowed scopes. How do I do that?

[kb]

Can someone please help me understand what the resource server identifier is? In the video, an arbitrary URL was used for this - a URL which is not referenced anywhere else in the video, other than when defining the oath scope for the request.

Why do we use a URL here?
How should we determine which URL should be used?
Should this URL have any association with the URL of the API we're allowing access to?

[kunalgholap]

How we can configure a Cognito Identity Pool to provide secure s3 bucket access from our web application where we can not only view but upload the objects as well?

[ravisurapati]

why are we not getting custom scopes in our user payload

[sumanthshetty]

Hi,
Very good video.
I wanted to know if i use normal web app login to generate the jwt token with the costume scope?
PS: here your using hosted ui but i am looking for a way from web app

[hitendraarvapalli]

Can I customize the response the gateway(Authorizer) sends if the token is expired?

[ellaisysofficial]

Hi Muthu, We are working on a solution using Cognito where there are apps (with user login) and linux (EC2) authentication also with user based uid/guid. Can Cognito help with Linux Auth (using PAM)? or allow AWS SSO and Cognito integration?

[alejandrochavez]

Great video! When I try it I receive a code, eg: How can I get the access token in order to use as header in the API Gateway request?

[sudhirtataraju]

eating our head developing all these junk .. oh god