Amazon Cognito Flashcards
What is Amazon Cognito?
Amazon Cognito is a service that provides authentication, authorization, and user management for your web and mobile apps. Your users can sign in directly with a user name and password, and through a third party such as Facebook, Amazon, Google or Apple.
What are the two main components of Amazon Cognito?
The two main components of Amazon Cognito are User Pools and Identity Pools.
What are User Pools?
User Pools are users directories that provide sign-up and sign-in options for your app users.
Your app users can sign in either directly through a user pool, or federate through a third-party identity provider (IdP). The user pool manages the overhead of handling the tokens that are returned from social sign-in through Facebook, Google, Amazon, and Apple, and from OpenID Connect (OIDC) and SAML IdPs. Whether your users sign in directly or through a third party, all members of the user pool have a directory profile that you can access through an SDK.
What are Identity Pools?
Identity Pools enable you to grant your users access to other AWS services.
With an identity pool, your users can obtain temporary AWS credentials to access AWS services, such as Amazon S3 and DynamoDB. Identity pools support anonymous guest users, as well as federation through third-party IdPs.
Can Identity Pool and User Pools used together?
Identity pools and User pools can be used separately or together.
What are the features of User pools?
User pools provide:
- Sign-up and sign-in services.
- A built-in, customizable web UI to sign in users.
- Social sign-in with Facebook, Google, Login with Amazon, and Sign in with Apple, and through SAML and OIDC identity providers from your user pool.
- User directory management and user profiles.
- Security features such as multi-factor authentication (MFA), checks for compromised credentials, account takeover protection, and phone and email verification.
- Customized workflows and user migration through AWS Lambda triggers.
What identity providers that you can use to authenticate users for identity pools?
Following identity providers can be used to authenticate users for identity pools:
- Amazon Cognito user pools
- Social sign-in with Facebook, Google, Login with Amazon, and Sign in with Apple
- OpenID Connect (OIDC) providers
- SAML identity providers
- Developer authenticated identities
What aspects of identity pool and user pool are necessary to save user profile information?
To save user profile information, your identity pool needs to be integrated with a user pool.
