Amazon Cognito

Amazon Cognito is used to handle authentication, authorization, and user management for web and mobile applications. Users can log in using their username and password or through a third-party service like Facebook, Amazon, Google, or Apple.

Along with this, Amazon Cognito also provides the ability to provide temporary AWS credentials to users. For each of these functionalities, it has a pool.

How Amazon Cognito works

In Amazon Cognito, we can create two types of pools: user and identity pools.

• User pools: We can create our user directory to store user profiles. We can also use user pools to add third-party identity providers such as Facebook, Google, Amazon, Apple, SAML, and OIDC. Cognito provides us with a user interface for our sign-up and sign-in page. These pages can be customized according to our application’s requirements.