Home icon

Implement fine-grained authorization in your .NET API using Amazon Cognito Custom Scopes

.NET on AWS Blog



This article explains how to implement fine-grained authorization in a .NET API using Amazon Cognito custom scopes. It covers:

  • Background on OAuth 2.0 scopes and resource servers
  • Setting up Amazon Cognito with a user pool, resource server, and app client with custom scopes
  • Implementing a .NET API with JWT Bearer authentication and custom scope authorization
  • Testing the API using Thunder Client and verifying access token scopes
  • Conclusion on securing APIs with fine-grained access control using custom scopes


Go to article

The AWS News Feed is currently looking for gold sponsors. If you want to support the AWS community and reach a large audience of AWS professionals, consider sponsoring the AWS News Feed.

Related articles

Apr 24
2024
Authorize API Gateway APIs using Amazon Verified Permissions with Amazon Cognito or bring your own identity provider
Feb 24
2025
Implement Role-based Access Control for .NET applications with Amazon Cognito
Mar 26
2024
Use Amazon Verified Permissions for fine-grained authorization at scale
May 21
2024
Amazon Verified Permissions improves support for Cognito tokens

The AWS News Feed is currently looking for silver sponsors. If you want to support the AWS community and reach a large audience of AWS professionals, consider sponsoring the AWS News Feed.