Advanced AI Prompt for API Gateway Security Hardening and Authorization

Act as a Cloud Security Engineer. Architect an impenetrable security framework for an AWS API Gateway [API_TYPE] endpoint. Deeply integrate [AUTH_PROVIDER] as the sole identity provider. The resulting design must strictly adhere to the [COMPLIANCE_STANDARD] regulatory requirements. Detail the precise implementation of Custom Lambda Authorizers, Cognito User Pool mappings, strict Resource Policies, and aggressive Throttling/Usage Quotas to mitigate Layer 7 DDoS attacks. Include a production-ready AWS SAM/CloudFormation YAML snippet for the Auth configuration, and provide the Node.js or Python logic required to cryptographically validate JWT signatures and enforce scope-based RBAC.