Creating an API Gateway Cognito Authorizer with the .NET CDK

You are building your infrastructure as code using the .NET CDK and want to add a Cognito User Pool authorizer to an API Gateway endpoint. Adding the Authorizer to the whole API is easy, but you only want it for certain endpoints – or specific ones. How can this be achieved?