与Cognito用户池集成后如何访问AWS API

Question

I have created API for my Lambda function and tested URL in postman, I am able to view the response. Now, for security purpose I have integrated Cognito user pool authorizers to my API.Now I tried to use API and getting response as below

{
    "message": "Unauthorized"
}

I am having App client id and App client secret for my cognito user pool.Now,I need help for authenticating the API using postman.

Answer 1

Depending on the specific resource method configuration you may need to send the ID Token instead of the Access Token. It took some careful reading of the AWS docs Integrate an API with a User Pool . Steps 6 and 7 are the key to determine which token should be sent. A summary is:

If on the secured Resource Method (Method Execution step) the OAuth Scopes setting is set to NONE an ID Token should be sent. If a scope value is entered an Access Token should be sent.