Staying ahead of threat actors with Amazon Cognito
summary
A concrete recipe for hardening customer identity: use Amazon Cognito with AWS WAF rate limits and bot control, front‑end Cognito SDK for device/context, and Lambda lifecycle hooks to migrate and enrich tokens; monitor CloudWatch/CloudTrail/service‑quotas and alarm at 50/70/90% headroom. A customer implementation on 200 websites, 70M users combines advanced security and WAF and reports reduced password stuffing from 96M to ~1,000/day, onboarding cut from ~10s to 2s, and fewer fraudulent cash‑outs.
AI-written summary · about
chapters (11)
- 0:00Introduction and overview
- 1:04Rising threat landscape for online business
- 3:11Layered security approach with Cognito
- 5:40Network protection with AWS WAF
- 7:47Threat detection in Amazon Cognito
- 13:55Lambda triggers for custom security
- 16:25Dynata’s journey with Cognito
- 29:18Implementing Cognito authentication flows
- 36:31Results and benefits from migration
- 43:52Detection and monitoring best practices
- 51:45Actionable security recommendations
related talks
45mMigrating to Amazon Cognito, featuring approaches from
45mInternet-Scale Analysis of AWS Cognito Security
39mHelp prevent account fraud with AWS WAF
21mEarning Trust in Identity at Scale
44mAchieve your identity, security, and compliance goals on
01h 00mAWS Identity Workshop
33mNetwork and application protection on AWS
53mAchieving End-to-end Security on AWS