Use JWT Authorizers with Amazon Cognito and API Gateway

HTTP endpoints in API Gateway have the ability to secure resources by first validating a JWT token.

In this example, we'll use Amazon cognito's hosted UI to to create a JWT and configure an API Gateway to only provide a lambda response if it's valid.

cognito issuer endpoint:

grabbing the jwt from the url:

[Munk-tttz]

Him: "I hate when folks don't give you all the little details that you might need..."
Me: Subscribed

[robbieleegames]

That was awesome. Some people would have turned that into an hour long video and not covered all the details either. Perfect and to the point in under 14 minutes.

[marshalsea]

Thanks for this concise and helpful - so many incorrect videos out there that obviously do not understand OAuth and copying from the same incorrect source.
Warning - AWS has significantly changed various areas and you need to switch back to the Cognito v1 (on the left side menu) to make this work as expected... Yay AWS!

[Tecnologik]

This was incredibly helpful! You did a great job explaining everything thoroughly. Great quality content, keep it up man! 🙏💪

[phillipsharring]

I immediately wanted to click subscribe just because of your vibe - but I waited til you said there would be flubs and I was like "ok this guy is cool" - and actually kind of inspiring to me, too :)

[valirjonathan]

Thanks 🙏. Please make another video where we can learn how to assign role and how to allow users with different roles to access different resources.

[hamidapremani]

Huge Thank you! Simple, thorough, and spot on!

[KATABU]

First time i feel i need to comment on a video - dude, you are amazing!

[zhongdaochen]

Thanks for doing this! Really helpful and truly appreciated!

[normanluismadrid]

dayum, my man makes it look so ez lol, great video! keep up the great content!

[CloudBart]

Yeah Michael, way to get it together! Great job

[khandoor]

Great video Michael, tracking you man.

[heyralfs]

I just had to subscribe your chennel, because I was looking for some video like your for days and you save me! Thanks a lot!!!

[jigishpthakar]

really helpful, resolved some real issue for me :D

[justinphilpott]

Nice video, good clear speaking voice, thanks!

[tacosdecamaron]

Thank you man. Good video and very updated!!

[ricardosmith]

Dude you earned my sub! Awesome tutorial :D

[balawalchaudry]

this was great, thank you! however i have a question. i have this API connected to my lambda function as a trigger, and i have a slack app which in event subscription, takes in an endpoint (in this case it is my newly authorized endpoint configured in my lambda function). however, because the API is protected, slack won't be able to verify it or access it. how can i enable slack to access this? thank you again for the vdeo!

[pourmog]

thank you! you made it very easy to follow.

[skverskk]

Nice tutorial and well explained. I thought AWS Cognitoruns on the backend, but I see it writes out the tokens in local storage on the client.