在CDK中将Cognito Authorizer添加到Api网关LambdaRestAPI

import * as cdk from 'aws-cdk-lib';
import * as apigateway from 'aws-cdk-lib/aws-apigateway';
import * as lambda from 'aws-cdk-lib/aws-lambda';
import * as cognito from 'aws-cdk-lib/aws-cognito';

export class MyStack extends cdk.Stack {
  constructor(scope: cdk.Construct, id: string, props?: cdk.StackProps) {
    super(scope, id, props);

    // 创建 Cognito 用户池
    const userPool = new cognito.UserPool(this, 'MyUserPool', {
      // 配置用户池属性
      // ...
    });

    // 创建 Cognito 用户池客户端
    const userPoolClient = new cognito.UserPoolClient(this, 'MyUserPoolClient', {
      userPool,
      // 配置用户池客户端属性
      // ...
    });

    // 创建 Lambda 函数
    const lambdaFunction = new lambda.Function(this, 'MyLambdaFunction', {
      // 配置 Lambda 函数属性
      // ...
    });

    // 创建 API 网关
    const api = new apigateway.LambdaRestApi(this, 'MyApi', {
      handler: lambdaFunction,
      // 配置 API 网关属性
      // ...
    });

    // 将 Cognito Authorizer 添加到 API 网关
    const authorizer = new apigateway.CognitoUserPoolsAuthorizer(this, 'MyAuthorizer', {
      cognitoUserPools: [userPool],
      // 配置 Cognito Authorizer 属性
      // ...
    });

    // 将 Authorizer 添加到 API 网关的特定资源
    const resource = api.root.addResource('my-resource');
    resource.addMethod('GET', new apigateway.LambdaIntegration(lambdaFunction), {
      authorizer,
      // 配置方法属性
      // ...
    });
  }
}

cdk deploy