Amazon Cognito
#102 · Level 3 · Modern architecture · SecurityConcept
Section titled “Concept”Amazon Cognito provides a login system for the users of your web or mobile app. Its main part is the user pool, which keeps the list of users and handles sign-up, sign-in and password reset. With a user pool, users can also log in with outside identities such as Google, Facebook or SAML. Another part is the identity pool, which gives users temporary AWS credentials so the app can use AWS services directly. IAM is for staff who use AWS, while Cognito is for your app’s customers.
Simple example
Section titled “Simple example”A club’s membership card system — registering new members, checking cards at the entrance, and, if allowed, entering with another club’s card too.
Why it’s needed
Section titled “Why it’s needed”Building a login system yourself is hard and risky — storing passwords safely, resetting them when forgotten, logging in with Google/Facebook.
Where it’s used
Section titled “Where it’s used”User login for apps, “Log in with Google”, and using AWS safely from a mobile app.
Azure equivalent
Section titled “Azure equivalent”Microsoft Entra External ID
Learn more
Section titled “Learn more”For details and the latest information, see the official documentation: