What authentication flow should we use for access from external API when we use Cognito?

Question

We have the following situation. We create a system based on AWS services - Gateway and Cognito API. API will be used by the GUI interface and for this case we want to use