seems that

awsx.apigateway

doesn't support

authorizationScopes

, which means it has to create a fresh authorizer for each Cognito scope. Solution will be to use

aws.apigateway

, although I much preferred the

awsx

interface.