Cognito Flashcards
What is Cognito?
is a simple user identity and data synchronization service that helps you give our users an identity so that they can interact with our application
What is Cognito User Pools?
User pools are for authentication (identify verification). With a user pool, your app users can sign in through the user pool or federate through a third-party identity provider (IdP).
What is Cognito Identity Pools (Federated Identity)?
Amazon Cognito identity pools provide temporary AWS credentials for users who are guests (unauthenticated) and for users who have been authenticated and received a token. It provides identities for “users” so they obtain temporary AWS credentials
What is Cognito Sync?
is an AWS service and client library that enables cross-device syncing of application-related user data
(Deprecated by AppSync)
What extra features are providen by Cognito User Pools to enhance security?
email / phone verification, MFA
What is returned by Cognito User Pools?
A JSON Web Token (JWT)
What is required by Cognito Sync?
Cognito Identity Pools (not User Pool)
What is the difference between Cognito User Pools and Cognito Identity Pools?
User pools are for authentication (identify verification). Identity pools are for authorization (access control)
How can you create a serverless database of user for your web & mobile apps?
Cognito User Pools
What features have Cognito User Pools?
- Simple login: Username (or email) / password combination
- Password reset
- Federated Identities: users from Facebook, Google, SAML…
- Feature: block users if their credentials are compromised elsewhere
What AWS services are integrated to Cognito User Pools?
API Gateway and ALB
How can you define triggers in Cognito User Pools?
CUP can invoke a Lambda function synchronously on triggers
What are main triggers in Cognito User Pools?
Authentication events: • Pre Auth • Post Auth • Pre Token generation Sign-Up • Pre Sign-Up • Post Confirmation • Migrate User Messages • Custom Message Token Creation • Pre Token Generation
What is used for Cognito User Pool Pre Authentication trigger?
Custom validation to accept or deny the sign-in request
What is used for Cognito User Pool Post Authentication trigger?
Event logging for custom analytics