I'm in the midst of implementing Cognito as the authorizer for my Lambda functions through API Gateway but just trying to wrap my head around a few concepts.
What is the purpose of access tokens with Cognito?
In order to authorize request I pass the id_token as the authorization header, which from my understanding you would normally pass the access token as the bearer.
The only way I see access tokens being used is if I build a custom autohrizer but since the logic is already all there there's no point.
Cheers
