This lab is currently in Beta, content may be updated as we refine the material
LABINTERMEDIATE

Serverless REST API with Cognito Authentication

Build a serverless REST API with API Gateway, Lambda, and DynamoDB, then secure it with Amazon Cognito JWT authorization.

45 minutes
infrastructure/aws
Serverless REST API with Cognito Authentication - Platform Engineering Hands-On Lab Icon
Share this Lab

Lab Overview

Build a production-style serverless REST API entirely from the AWS CLI. You will create a DynamoDB table, a Python Lambda function, and an HTTP API in API Gateway with GET and POST routes. Then you will add Amazon Cognito authentication so only users with a valid JWT can access the API.

You'll learn to:

  • Create a DynamoDB table and a Lambda function that reads and writes to it
  • Build an HTTP API (API Gateway v2) with Lambda integration and routes
  • Set up an Amazon Cognito User Pool and app client
  • Create a JWT authorizer on the API Gateway and attach it to routes
  • Authenticate with Cognito and test protected endpoints with curl

Key Resources:

What You'll Learn

Create a DynamoDB table and a Lambda function with an IAM execution role

Build an HTTP API with Lambda proxy integration and resource routes

Configure an Amazon Cognito User Pool with a test user

Add JWT authorization to API Gateway routes

Authenticate with Cognito and call protected API endpoints

Prerequisites

Basic AWS CLI familiarity

Understanding of REST APIs and HTTP methods

Familiarity with IAM roles and policies

Technologies Covered

awsapi-gatewaylambdadynamodbcognitoserverlessrest-apijwt

Part of a Course

This lab is part of the AWS Solutions Architect Associate (SAA-C03) course

View All Courses

Choose your plan

Simple, Transparent Pricing

Unlock full access to TeKanAid courses, labs, and bootcamps

Buying for a team? Private corporate training is available for up to 15 learners.View team training
MonthlyQuarterly
Try Premium free for 7 days →

Just exploring? Start free below. Want the full experience? Try Premium free for 7 days (card required, $0 today).

Pro

All courses, with lab scripts to run on your own machine

$59/month

Renews automatically. Cancel anytime.

Final price verified at checkout.

  • Full access to all courses
  • Lab scripts to download and run on your own machine (hosted labs not included)
  • Progress tracking
  • Certificate of completion
  • Community access
  • Self-paced bootcamps
  • Premium puzzle library not included (5 free puzzles available)
  • New content access
Recommended

Premium

Full access, including unlimited hosted labs

$99/month

Renews automatically. Cancel anytime.

Final price verified at checkout.

  • Everything in Pro
  • Unlimited hands-on labs, fully hosted on TeKanAid Academy (nothing to set up)
  • Full access to the puzzle library
  • Lab AI Assistant
  • Priority support

Prefer a single course?

Purchase individual courses for a one-time fee of $79. Full access to course content, quizzes, certificates, and community features, lab access is not included.

Browse Courses

Just exploring? Start free, no account needed

Three free ways to start. All bridge into the paid Premium catalog when you're ready.

Not ready to commit? The crash course is email-only. No academy account required.

Ready to Get Started?

Start this hands-on lab and build real-world Platform Engineering skills

Get Access Now