Please provide either an authorizer name or ARN

I am trying to setup Cognito as my authorizer as code below:

functions:
graphql:
timeout: 5
handler: functions/graphql.handle
events:
- http:
path: /graphql
method: post
cors: true
authorizer:
type: COGNITO_USER_POOLS
authorizerId:
Ref: ApiGatewayAuthorizer

- http:
path: /sync/graphql
method: post
cors: true

resources:
Resources:

lambdaSg:
Type: ‘AWS::EC2::SecurityGroup’
Properties:
GroupDescription: ‘Lambda functions security group’
SecurityGroupIngress:
- IpProtocol: -1
CidrIp: ‘0.0.0.0/0’
SecurityGroupEgress:
- IpProtocol: -1
CidrIp: ‘0.0.0.0/0’
VpcId: ${env:VPC_ID}

ApiGatewayAuthorizer:
Type: AWS::ApiGateway::Authorizer
Properties:
Name: api-auth-cognito-${opt:stage, self:provider.stage}
Type: COGNITO_USER_POOLS
IdentitySource: method.request.header.Authorization
RestApiId:
Ref: ApiGatewayRestApi
ProviderARNs:
- Fn::GetAtt:
- UserPool
- Arn

UserPool:
Type: “AWS::Cognito::UserPool”
Properties:
UserPoolName: bario-back-office
UsernameAttributes:
- email
AutoVerifiedAttributes:
- email
Schema:
- Name: company
AttributeDataType: String
Mutable: false
Required: false

UserPoolClient:
Type: “AWS::Cognito::UserPoolClient”
Properties:
ClientName: bario-back-office
ExplicitAuthFlows:
- ADMIN_NO_SRP_AUTH
- USER_PASSWORD_AUTH
GenerateSecret: false
UserPoolId:
Ref: UserPoolPreformatted text

It seems to be right, but i am getting:

Please provide either an authorizer name or ARN