How to invoke API endpoint using access token - Amazon API Gateway Authorization p6

Welcome to part 6 of the tutorial series on Amazon API Gateway Authorization. In this tutorial, I have shown how to access or invoke API endpoints using an access token via Cognito.

Support my work:
---
Paytm | Gpay: 9023197426

---
Series
---

---
Connect with me
---

[costa]

This playlist was extremelly helpful to me. Way clearer than AWS docs. Thanks a lot!

[nitink]

Perhaps the best coverage on AWS cognito on utube.

[aadityakiran_s]

Very good bro. Your tutorial helped me a lot. It allowed me to complete my assignment and officially shift to the AWS team of my company. You saved my job. Thank you.

[alisharaju]

Thanks a lot for this series! Reallllyy helped me!!!

[appsCoZa]

Great series of tutorials covering api gateway authorization! thanks.

[blanky_nap]

Great video! The question is how to automate the entire process in production? In a real application you don't invoke hosted ui an copy&paste the tokens to postman

[vadirajkr]

Absolutely brilliant tutorial buddy. Please keep them coming!!

[aara]

Great video. Would like to know what is the use of "resource server" here?
how it is working while decrypting. pls explain

[amitkeshri]

All the Srce cde AWS tutorial are very beneficial for me and i also want some tutorial series on RDS services of AWS.

[jatinjn]

Nice videos easy to understand. Can please make video on Client credentials and API Keys also how to implement this with a UI code or python code

[shanthisafalasanam]

Hey, thank you for this series, it is really helpful! If we want to build an web application is it possible to use API Gateway and VPC and make the web page available on Internet?

[ParadeOfChariots]

That's great explanation. Thank you for clarifying some of the doubts that I had. I do have a question. How do I assign user to different group, let's say some will have read access and some will have write access?

[orgpark]

Thank you. This tutorial is very helpful.

I need to set custom scopes per user, and not just per user pool. Each user has its own particular set of allowed scopes. Can we do it? Please help.

[hasnibalochi]

Thanks for this extremely useful video.

I'm concerned about the protection of scope names. It is easy for an hacker to figure the cognito domain url and scope names, embedded in the client-app. They can change these scope names and make elevated api-calls even when they are not authorized to. Thoughts?

[vipulranjankhare]

Thank you soo much for such a wonderful series.Also can you please make a video on JWT token ?

[lonesareer]

the best tutorial for authorization, . I learnt a lot from you, Thanks a ton .please could you start on lex

[MahendraJoshiYoga]

Wonderful series. I watched all and able to create auth successfully. But the token expires quickly. How do I refresh it? I searched many pages but havent found proper thread that I can implement with your solution. Can you please elaborate how do I avoid the token expired error? - "message":"The incoming token has expired" - I get this after successfully using the endpoint for sometime. Any thoughts? Thanks again!!

[omkarcoder]

Just a query, when I use Cognito UI to get access token, the postman API gets invoked, but when I get access token using python boto3 or AWS cli through initiate_auth, the access token doesn't invoke the API, and says Unauthorised. Any comments??

[sridhar]

Nice videos!

Once the user is authenticated to cognito, is there any option to generate access_token to API gw instead of going through postman? does this needs to be handled at the front end at the application level? any thoughts?

[sandip]

how to do authorization without using AWS cognito service ? and how we can use our own auth server