Implement certificate-bound access tokens for custom domain with API Gateway and Cognito user pools
This pattern creates an Amazon API Gateway REST API and enables mTLS for a custom domain.
Further, it creates a Cognito User Pool, which issues the certificate-bound access tokens.
The REST API makes use of an authorizer to compare the 'cnf' claim in the access token to the fingerprint of the client certificate sent as part of the mutual authentication TLS handshake
< Back to all patterns
Clone repo
git clone https://github.com/aws-samples/serverless-patterns/cd serverless-patterns/apigw-cognito-certificate-bound-access-tokenDeploy
sam deployTesting
See the GitHub repo for detailed testing instructions.
Cleanup
Delete the stack:
sam delete.Created by:
