What is Amazon Cognito?

What is Amazon Cognito?

Amazon Cognito provides authentication, authorization, and user management for your web and mobile apps. Your users can sign in directly with a user name and password, or through a third party such as Facebook, Amazon, Google or Apple.

The two main components of Amazon Cognito are user pools and identity pools. User pools are user directories that provide sign-up and sign-in options for your app users. Identity pools enable you to grant your users access to other AWS services. You can use identity pools and user pools separately or together.

An Amazon Cognito user pool and identity pool used together

See the diagram for a common Amazon Cognito scenario. Here the goal is to authenticate your user, and then grant your user access to another AWS service.

  1. In the first step your app user signs in through a user pool and receives user pool tokens after a successful authentication.

  2. Next, your app exchanges the user pool tokens for AWS credentials through an identity pool.

  3. Finally, your app user can then use those AWS credentials to access other AWS services such as Amazon S3 or DynamoDB.

Amazon Cognito overview

Features of Amazon Cognito

User pools

A user pool is a user directory in Amazon Cognito. With a user pool, your users can sign in to your web or mobile app through Amazon Cognito, or federate through a third-party identity provider (IdP). Whether your users sign in directly or through a third party, all members of the user pool have a directory profile that you can access through an SDK.

User pools provide:

  • Sign-up and sign-in services.

  • A built-in, customizable web UI to sign in users.

  • Social sign-in with Facebook, Google, Login with Amazon, and Sign in with Apple, and through SAML and OIDC identity providers from your user pool.

  • User directory management and user profiles.

  • Security features such as multi-factor authentication (MFA), checks for compromised credentials, account takeover protection, and phone and email verification.

  • Customized workflows and user migration through AWS Lambda triggers.

Identity pools

With an identity pool, your users can obtain temporary AWS credentials to access AWS services, such as Amazon S3 and DynamoDB. Identity pools support anonymous guest users, as well as the following identity providers that you can use to authenticate users for identity pools:

  • Amazon Cognito user pools

  • Social sign-in with Facebook, Google, Login with Amazon, and Sign in with Apple

  • OpenID Connect (OIDC) providers

  • SAML identity providers

  • Developer authenticated identities

To save user profile information, your identity pool needs to be integrated with a user pool.

Follow the link below to setup AWS Cognito, User Signup and Confirm

https://vishal-gupta-1711.blogspot.com/2022/05/setup-aws-cognito-and-signup-user-using.html

Comments

Post a Comment

Popular posts from this blog

Setup AWS Cognito and Signup user using Postman

Setup AWS Cognito and Signup User using Postman To Setup a cognito follow the below steps 1:- Open AWS Console and move to Cognito 2:- Click on Manage User Pools & Click on Create a User Pool. 3:- Click on Review Defaults and Create a User Pool. 4:- Create a App Clients 5:- After Creating App Client You will get a Client Id  which we will use in Postman. 6:- Now open a Postman for Signup a User. Request URL:-      https://cognito-idp.us-east-1.amazonaws.com Method:-     POST Request Header:-  Request Payload:-       { "ClientId": "XXXXXXXXXXXXXX", "Username": "vishal.gupta.sf@gmail.com", "Password": "Password@1234", "UserAttributes": [ { "Name": "email", "Value...
Read more

AWS IOT Create OTA With RollOut and Abort Configuration.

Image
  What is OTA? Over-the-air (OTA) Updated allows you to deploy update firmware updates on one or more devices in your fleet. Below is the bash command to create OTA. aws iot create-job \ --job-id "example-cli-job" \ --document file://IOTCore/jobDocument.json \ --description "Job test for dynamic group" \ --target-selection SNAPSHOT \ --job-executions-retry-config file://IOTCore/config/retries.json \ --job-executions-rollout-config file://IOTCore/config/rollout.json \ --abort-config file://IOTCore/config/abort.json \ --targets "arn:aws:iot:us-east-1:test_account_id:thinggroup/testdevices" You need a latest AWS Cli version for creating OTA with above given command (mine is 2.5.8). targets:-   Targets can be single Device, group of Devices Or Groups like Static and Dynamic Group.  retry-config:-   Retry config is a config on how failed devices should behave. Like below JSON i have used to retry 2 times on Failed OTA Update. It ...
Read more