Create an Amazon Cognito user pool for a REST API
Before integrating your API with a user pool, you must create the user pool in Amazon Cognito. For instructions on how to create a user pool, see Setting up User Pools in the Amazon Cognito Developer Guide.
Ensure that user-defined Amazon Cognito variables such as groups, users, and roles use only alphanumeric characters.
Note the user pool ID, client ID, and any client secret. The client must provide them to Amazon Cognito for the user to register with the user pool, to sign in to the user pool, and to obtain an identity or access token to be included in requests to call API methods that are configured with the user pool. Also, you must specify the user pool name when you configure the user pool as an authorizer in API Gateway, as described next.
If you're using access tokens to authorize API method calls, be sure to configure the app integration with the user pool to set up the custom scopes that you want on a given resource server. For more information about using tokens with Amazon Cognito user pools, see Using Tokens with User Pools. For more information about resource servers, see Defining Resource Servers for Your User Pool.
Note the configured resource server identifiers and custom scope names. You need them
to construct the access scope full names for OAuth Scopes,
which
is used by the COGNITO_USER_POOLS authorizer.
