APIs & Auth on AWS

API Gateway HTTP APIs with throttling and access logs on by default. Protect every route with Cognito or any OIDC provider (Auth0, Clerk, Okta, Google) through one authorizer.

Components

• HttpApi — An API Gateway HTTP API with throttling, one-year access logs and strict CORS by default. Add a custom domain or protect every route in one line.
• CognitoUserPool — A Cognito user pool with a 12-character password policy, deletion protection and an app client. Add MFA, social login or SAML when you need them.
• CognitoAuth — Protect API Gateway routes with Cognito. Pass the user pool and app client IDs; Anvil derives the issuer and wires up the JWT authorizer.
• OAuthAuthorizer — Protect API Gateway routes with Auth0, Clerk, Okta, Google or any OIDC provider. Give it an issuer and audience; Anvil does the rest.