In this chapter, we have discussed the basic security concepts and how to apply them in a serverless project. For our demo application, we have used Amazon Cognito to handle the authentication and authorization of users, so you have learned how to implement signup, signin, and logout features.
In the next chapter, we will use the Cognito credentials to access AWS IoT resources to handle serverless notifications. We will see how the backend can send messages to an authenticated user and how to provide real-time notifications to anonymous users.
