title: How can I use Cognito OAuth 2.0 to authenticate a API Gateway request without having an app client secret?
body: <p>I'm using aws sdk to manage logins and signups on my app and the sdk requires my app client to have no secret key. This is a problem since I intend to use Cognito to authenticate the API gateway. I tried to enable OAuth 2.0 client credentials flow on app client settings, select a scope and give it to the API method, but when I try to save the app client settings I get: </p>
  
  <p>"We were unable to update your App Configuration: client_credentials flow can not be selected if client does not have a client secret. (Service: AWSCognitoIdentityProviderService; Status Code: 400; Error Code: InvalidOAuthFlowException"</p>
  
  <p>Is there a better way to configure API Gateway with Cognito? Am I doing something wrong?</p>