Cloud Development Kit (CDK)

Question 1

Amazon Cognito

Answer 1

• if you see mobile, SAML authentication, hundreds of users, think cognito
• users OUTSIDE your cloud, like mobile app users

Question 2

cognito user pools

Answer 2

• allows sign in functionality
  
  • federated identities - facebook, google, SAML
  • get JWT for login
  • integrates with API gateway and ALB

Question 3

cognito identity pools

Answer 3

• (federated identity)
  
  • integrate with cognito user pools as identity provider
  • provide aws credentials to users so they can access aws resources directly
  • can give unauthenticated guest access