To begin securing API access, go to API Gateway console, choose the RESTful API that we built in the previous chapters, and click on Authorizers from the navigation bar:
Click on the Create New Authorizer button and select Cognito. Then, select the user pool that we created earlier and set the token source field to Authorization. This defines the name of the incoming request header containing the API caller's identity token for Authorization:
Once the form has been filled in, click on Create to integrate the Cognito User ...
