Overview
Authentication service.
Two types
- User pools
- Identity Pools(Federated Identity)
User Pools
Sign in functionality for app users.
Integrate with API gateway and application load balancer.
Simple login.
Password reset.
Email & Phone verification.
MFA
Federated Identity: Users from FB, Google, SAML
Identity Pools(Federated Identity)
Get Identity for users, So they obtain temporary AWS credentials
Can access to AWS directly or through API Gateway
Can apply IAM policies in Cognito.
For guest users and authenticated users the IAM roles are applied by default.