Best way to authorize gateway access to IAM and Cognito using CDK

Question

Using CDK, I have a gateway rest api lambda which I want to be accessible to;

• Members of a cognito user pool
• Other lambdas in my stack

As