class GatewayAuthorizer 🔹

Language	Type name
.NET	Amazon.CDK.AWS.Bedrock.Agentcore.Alpha.GatewayAuthorizer
Go	github.com/aws/aws-cdk-go/awsbedrockagentcorealpha/v2#GatewayAuthorizer
Java	software.amazon.awscdk.services.bedrock.agentcore.alpha.GatewayAuthorizer
Python	aws_cdk.aws_bedrock_agentcore_alpha.GatewayAuthorizer
TypeScript (source)	@aws-cdk/aws-bedrock-agentcore-alpha » GatewayAuthorizer

Factory class for creating Gateway Authorizers.

Initializer

new GatewayAuthorizer()

Methods

Name	Description
static usingAwsIam()🔹	AWS IAM authorizer instance.
static usingCognito(props)🔹	Create a JWT authorizer from Cognito User Pool.
static usingCustomJwt(configuration)🔹	Create a custom JWT authorizer.
static withNoAuth()🔹	No authorization — the gateway will not perform any inbound authorization.

---

static usingAwsIam()🔹

public static usingAwsIam(): IGatewayAuthorizerConfig

Returns

• IGatewayAuthorizerConfig

AWS IAM authorizer instance.

---

static usingCognito(props)🔹

public static usingCognito(props: CognitoAuthorizerProps): IGatewayAuthorizerConfig

Parameters

• props CognitoAuthorizerProps — - The Cognito configuration.

Returns

• IGatewayAuthorizerConfig

Create a JWT authorizer from Cognito User Pool.

---

static usingCustomJwt(configuration)🔹

public static usingCustomJwt(configuration: CustomJwtConfiguration): IGatewayAuthorizerConfig

Parameters

• configuration CustomJwtConfiguration — - The JWT configuration.

Returns

• IGatewayAuthorizerConfig

Create a custom JWT authorizer.

---

static withNoAuth()🔹

public static withNoAuth(): IGatewayAuthorizerConfig

Returns

• IGatewayAuthorizerConfig

No authorization — the gateway will not perform any inbound authorization.

The gateway endpoint will be publicly accessible without credentials. Use this for testing/development, or for production gateways where you have implemented compensating controls such as Gateway Interceptors.

See also: https://docs.aws.amazon.com/bedrock-agentcore/latest/devguide/gateway-inbound-auth.html#gateway-inbound-auth-none