define cognito auth outside of control plane to disable scopes for testing

Author: suhussai

src/control-plane/integ.default.ts

@@ -5,7 +5,7 @@ import * as cdk from 'aws-cdk-lib';
 import { CfnRule, EventBus, Rule } from 'aws-cdk-lib/aws-events';
 import { LogGroup, RetentionDays } from 'aws-cdk-lib/aws-logs';
 import { AwsSolutionsChecks } from 'cdk-nag';
-import { ControlPlane } from '.';
+import { CognitoAuth, ControlPlane } from '.';
 import { DestroyPolicySetter } from '../cdk-aspect/destroy-policy-setter';
 
 export interface IntegStackProps extends cdk.StackProps {
@@ -16,7 +16,12 @@ export class IntegStack extends cdk.Stack {
   constructor(scope: cdk.App, id: string, props: IntegStackProps) {
     super(scope, id, props);
 
+    const cognitoAuth = new CognitoAuth(this, 'CognitoAuth', {
+      setAPIGWScopes: false, // only for testing purposes!
+    });
+
     const controlPlane = new ControlPlane(this, 'ControlPlane', {
+      auth: cognitoAuth,
       systemAdminEmail: props.systemAdminEmail,
     });