Example of a Cognito Authorizer being added to an endpoint on API Gateway

external.ts

 // add the cognito authorizer to our api which validates our tokens using cognito
const cognitoAuthorizer: apigw.CfnAuthorizer = new apigw.CfnAuthorizer(
  this,
  "APIGatewayAuthorizer",
  {
    name: "sushi-orders-authorizer",
    identitySource: "method.request.header.Authorization",
    providerArns: [userPool.userPoolArn],
    restApiId: ordersAPI.restApiId,
    type: apigw.AuthorizationType.COGNITO,
  }
);

 // add the endpoint for getting all orders
orders.addMethod(
  "GET",
  new apigw.LambdaIntegration(getOrders, {
    proxy: true,
    allowTestInvoke: true,
  }),
  {
    authorizationType: apigw.AuthorizationType.COGNITO,
    apiKeyRequired: true, // ensure that the consumer needs to send the api key
    authorizer: { authorizerId: cognitoAuthorizer.ref }, // the cognito authoriser will ensure we have a token
    authorizationScopes: [`orders/${getOrdersScope.scopeName}`], // ensure the token has the correct scope
  }
);