Using Web Identity Federation for Application Authentication
Most web and mobile applications require some form of authentication and authorization at the application layer before an end user can use its services.
In the case of the new Todo List application, customers will need to sign up for a subscription. Next, to ensure that only valid customers can access this application, a sign-in process will need to be built as part of the authentication and authorization security feature of the application.
Developing a database of users and verifying their credentials is a crucial step in any application’s development life cycle. However, storing credentials data within the application code or on devices is highly insecure and risky. To address this issue, Amazon recommends using web identity federation for web and mobile application authentication workflows. This allows applications to request temporary security credentials dynamically from an IdP, and an IAM role can generate...
