Customer Identity and Access Management on AWS
Now that we have covered Workforce IAM on AWS, let's discuss the requirements and how can we implement Customer Identity and Access Management (CIAM) on AWS.
AWS Cognito
AWS Cognito is the tool to use to implement CIAM on AWS. Amazon Cognito satisfies all the requirements presented in Chapter 1, On the Internet, Nobody Knows You’re a Dog (self-service, scalability, ease of use, and SSO). Unlike AWS IAM Identity Center, AWS Cognito is not free. It is a pay-as-you-use service. For the examples in this chapter, we will try to use as many of the free tier services as possible. With this introduction, let’s start using the Cognito user pools to manage our customers:
- Sign in to the AWS console at https://signin.aws.amazon.com/console:
Figure 7.43 – AWS console sign-in
- Search for Cognito:
Figure 7.44 – Searching for Cognito
...
