In this chapter, we will learn about Amazon Cognito. Cognito is Amazon's serverless user identity management service. Amazon Cognito can be used as an identity provider and an identity broker. As an identity provider, Cognito enables us to manage our own user pools. As an identity broker, Cognito helps us to make use of other identity providers such as Amazon, Google, Facebook, and Twitter. While most other chapters in this book discuss services related to infrastructure security on AWS, this chapter focuses mostly on application security concepts such as user pools, user signups, authentication and authorization flows, and federated identity logins.
In this chapter, we will cover the following recipes:
- Creating Amazon Cognito user pools
- Creating an Amazon Cognito app client
- User creation and user signups
- Implementing an admin...
