AWS Cogneto

Question 1

What is AWS Cognito?

Answer 1

Mobile-based auth and identity, where you can have the user management like, create, modify, delete and reset password done for you. You can also have external web-based identity providers integrated.

Question 2

I require OAuth2 with my mobile application, what service could I use?

Answer 2

Cognito supports

Question 3

I require OIDC with my mobile application, what service could I use?

Answer 3

Cognito supports

Question 4

I require JWTs with my mobile application, what service could I use?

Answer 4

Cognito supports

Question 5

How can I use Cognito to provide delegated access?

Answer 5

You can, deligated access is only available through AWS IAM, Cognito is for user management and web-based federation.

Question 6

What is OIDC?

Answer 6

Open ID connect

Question 7

What is JWT?

Answer 7

Java web token

Question 8

What is in a JWT?

Answer 8

Header
Payload
Signing

Question 9

What are the two main sections/services in reference to Cognito?

Answer 9

User pools

Identity pools

Question 10

I wnat to build an application fast and what to offload user UI management like user sign up, pass-reset, etc to service, what options do I have?

Answer 10

Cognito user pools offer this ability

Question 11

I am building a web-based application and I would like the ability to have social bast authentication in my application, what is my best option?

Answer 11

Cognito identity pools

Question 12

Is MFA supported by user management?

Answer 12

Yes 100%

Question 13

Can you customize the user pool user UI interface?

Answer 13

Yes 100%

Question 14

Can you use identity and user pools at the same time?

Answer 14

Yes 100%

Question 15

As part of my signup, I require SMS verification and email verification, what is my option if I do not wnat to build it in my app to save time?

Answer 15

You can use Cognito

Question 16

I wnat to use custom flows to the auth and sign up and even messages in Cognito, is this possible?

Answer 16

Yes 100%, using lambda

Question 17

What service does Cognito integrate with?

Answer 17

API Gateway

AWS ALB

Question 18

I have an application that uses ALB and being it is my app in an autoscaling group, I have been asked to add OAUTH authorization, how cna I do this?

Answer 18

The ALB has the ability to integrate with Cognito and Cognito supports OAUTH, So you have Cogneto preform the oTHUH for the user and provide the token to the ALB.

Question 19

I have an application that uses API with s my app in an autoscaling group, I have been asked to add OAUTH authorization, how cna I do this?

Answer 19

The API has the ability to integrate with Cognito and Cognito supports OAUTH, So you have Cogneto preform the oTHUH for the user and provide the token to the API GW.

Question 20

I have a mobile application, I intend to use a SynamoDBtable for each user to enable the user to store information but I need that ability to authorise again DynamoDB, what is my best option?

Answer 20

Cogneto can be used, Cognito will auth thet user and retrieve an STS token that cna be used to call other AWS services.

Question 21

When using user identity in Cogneto, what MFA types are supported MFA?

Answer 21

• email

- sms

Question 22

When Cognito is used to sign in from say google account, what is returned by Cognito?

Answer 22

STS access key and secret key

Question 23

When Cognito is used to sign in from say google account, what is returned by Cognito?

Answer 23

STS access key and secret key