Managing customer identities with Amazon Cognito
summary
Amazon Cognito centralizes four primary customer identity patterns: B2C sign‑up/sign‑in that returns ID access and refresh tokens, B2B/SaaS federation via SAML/OIDC or tenant‑specific hosted UIs, OAuth2 client credentials for machine‑to‑machine tokens, and a credential broker that exchanges tokens for temporary AWS credentials via an identity pool and IAM roles. Built demos use API Gateway (native Cognito authorizer) and AppSync/GraphQL; security features include adaptive authentication and compromised‑credential checks. A hands‑on workshop with eight labs walks through migration and integrations.
AI-written summary · about
chapters (8)
- 0:00Introduction to challenges
- 1:22Cognito features
- 2:51Primary use cases
- 3:51Business-to-customer flow
- 5:24Business-to-business flow
- 8:21Machine-to-machine auth
- 9:56Credential broker model
- 11:36Takeaways and resources
related talks
01h 00mAWS Identity Workshop
45mMigrating to Amazon Cognito, featuring approaches from
01h 30mUnlocking the Potential: Federated authentication from Azure to AWS
43mDemystifying the Identity Capabilities of AWS for Enterprise Practitioners
21mEarning Trust in Identity at Scale
28mIdentity Services on AWS
23mGetting started with identity on AWS
25mGetting started with AWS Identity Services