class GatewayAuthorizer 🔹

Language	Type name
.NET	Amazon.CDK.AWS.Bedrock.Agentcore.Alpha.GatewayAuthorizer
Go	github.com/aws/aws-cdk-go/awsbedrockagentcorealpha/v2#GatewayAuthorizer
Java	software.amazon.awscdk.services.bedrock.agentcore.alpha.GatewayAuthorizer
Python	aws_cdk.aws_bedrock_agentcore_alpha.GatewayAuthorizer
TypeScript (source)	@aws-cdk/aws-bedrock-agentcore-alpha » GatewayAuthorizer

Factory class for creating Gateway Authorizers.

Example

// Create a KMS key for encryption
const encryptionKey = new kms.Key(this, "GatewayEncryptionKey", {
  enableKeyRotation: true,
  description: "KMS key for gateway encryption",
});

// Create gateway with KMS encryption
const gateway = new agentcore.Gateway(this, "MyGateway", {
  gatewayName: "my-encrypted-gateway",
  description: "Gateway with KMS encryption",
  protocolConfiguration: new agentcore.McpProtocolConfiguration({
    instructions: "Use this gateway to connect to external MCP tools",
    searchType: agentcore.McpGatewaySearchType.SEMANTIC,
    supportedVersions: [agentcore.MCPProtocolVersion.MCP_2025_03_26],
  }),
  authorizerConfiguration: agentcore.GatewayAuthorizer.usingCustomJwt({
    discoveryUrl: "https://auth.example.com/.well-known/openid-configuration",
    allowedAudience: ["my-app"],
    allowedClients: ["my-client-id"],
  }),
  kmsKey: encryptionKey,
  exceptionLevel: agentcore.GatewayExceptionLevel.DEBUG,
});

Initializer

new GatewayAuthorizer()

Methods

Name	Description
static usingAwsIam()🔹	AWS IAM authorizer instance.
static usingCognito(props)🔹	Create a JWT authorizer from Cognito User Pool.
static usingCustomJwt(configuration)🔹	Create a custom JWT authorizer.

---

static usingAwsIam()🔹

public static usingAwsIam(): IGatewayAuthorizerConfig

Returns

• IGatewayAuthorizerConfig

AWS IAM authorizer instance.

---

static usingCognito(props)🔹

public static usingCognito(props: CognitoAuthorizerProps): IGatewayAuthorizerConfig

Parameters

• props CognitoAuthorizerProps — - The Cognito configuration.

Returns

• IGatewayAuthorizerConfig

Create a JWT authorizer from Cognito User Pool.

---

static usingCustomJwt(configuration)🔹

public static usingCustomJwt(configuration: CustomJwtConfiguration): IGatewayAuthorizerConfig

Parameters

• configuration CustomJwtConfiguration — - The JWT configuration.

Returns

• IGatewayAuthorizerConfig

Create a custom JWT authorizer.