StationX
Start free

Browse › Implement a Secure Serverless REST API

Secure Amazon API Gateway REST Methods by Using an Amazon Cognito User Pool

Advanced

Part of Implement a Secure Serverless REST API Topic: AWS

Counts towardsAWS Certified Security – Specialty badge

Access

StationX Infrastructure Labs — 3 attempts per lab

🔒 Add StationX Infrastructure Labs — $149 / year · 3 attempts per lab

Already have access? Sign in.

New to this? Try a free practice lab — a scripted hacking challenge in your browser, no account needed.

What you'll do

In this lab, you will authorize end users to access your Amazon API Gateway REST API.

  1. Create an Amazon Cognito user pool and an app client
  2. Create a new user in your Amazon Cognito user pool
  3. Add your Amazon Cognito user pool as an authorizer for your Amazon API Gateway REST API
  4. Obtain a valid Amazon Cognito user JWT token
  5. Verify that you can call your Amazon API Gateway endpoints by using this token

Note: Once you begin the lab, you will not be able to pause, save, or return to your lab. Please ensure that you have set aside enough time to complete the lab before you start.

Roadmaps that use this lab