Cognito Flashcards

1
Q

What is Cognito?

A

is a simple user identity and data synchronization service that helps you give our users an identity so that they can interact with our application

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
2
Q

What is Cognito User Pools?

A

User pools are for authentication (identify verification). With a user pool, your app users can sign in through the user pool or federate through a third-party identity provider (IdP).

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q

What is Cognito Identity Pools (Federated Identity)?

A

Amazon Cognito identity pools provide temporary AWS credentials for users who are guests (unauthenticated) and for users who have been authenticated and received a token. It provides identities for “users” so they obtain temporary AWS credentials

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q

What is Cognito Sync?

A

is an AWS service and client library that enables cross-device syncing of application-related user data
(Deprecated by AppSync)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
5
Q

What extra features are providen by Cognito User Pools to enhance security?

A

email / phone verification, MFA

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
6
Q

What is returned by Cognito User Pools?

A

A JSON Web Token (JWT)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
7
Q

What is required by Cognito Sync?

A

Cognito Identity Pools (not User Pool)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
8
Q

What is the difference between Cognito User Pools and Cognito Identity Pools?

A

User pools are for authentication (identify verification). Identity pools are for authorization (access control)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
9
Q

How can you create a serverless database of user for your web & mobile apps?

A

Cognito User Pools

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
10
Q

What features have Cognito User Pools?

A
  • Simple login: Username (or email) / password combination
  • Password reset
  • Federated Identities: users from Facebook, Google, SAML…
  • Feature: block users if their credentials are compromised elsewhere
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
11
Q

What AWS services are integrated to Cognito User Pools?

A

API Gateway and ALB

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
12
Q

How can you define triggers in Cognito User Pools?

A

CUP can invoke a Lambda function synchronously on triggers

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
13
Q

What are main triggers in Cognito User Pools?

A
Authentication events:
•	Pre Auth 
•	Post Auth
•	Pre Token generation
Sign-Up 
•	Pre Sign-Up 
•	Post Confirmation 
•	Migrate User 
Messages
•	Custom Message 
Token Creation
•	Pre Token Generation
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
14
Q

What is used for Cognito User Pool Pre Authentication trigger?

A

Custom validation to accept or deny the sign-in request

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
15
Q

What is used for Cognito User Pool Post Authentication trigger?

A

Event logging for custom analytics

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
16
Q

What is used for Cognito User Pool Pre Token Generation Authentication Event trigger?

A

Augment or suppress token claims

17
Q

What is used for Cognito User Pool Pre Sign-up trigger?

A

Custom validation to accept or deny the sign-up request

18
Q

What is used for Cognito User Pool Post Confirmation trigger?

A

Custom welcome messages or event logging for custom analytics

19
Q

What is used for Cognito User Pool Migrate User trigger?

A

Migrate a user from an existing user directory to user pools

20
Q

What is used for Cognito User Pool Custom Message trigger?

A

Advanced customization and localization of messages

21
Q

What is used for Cognito User Pool Pre Token Generation Token Creation trigger?

A

Add or remove attributes in Id tokens

22
Q

What feature does have Cognito User Pool to help you with authentication?

A

Cognito has a hosted authentication UI that you can add to your app to handle signup and sign-in workflows.
Using the hosted UI, you have a foundation for integration with social logins, OIDC or SAML

23
Q

What can you do when you use Cognito User Pool hosted authentication UI?

A

You can customize logo and CSS

24
Q

What are Cognito Identity Pools authentication methods?

A

o Public Providers (Login with Amazon, Facebook, Google, Apple)
o Users in a Cognito User Pool
o OpenID Connect Providers & SAML Identity Providers
o Developer Authenticated Identities (custom login server)
o Cognito Identity Pools allow for unauthenticated (guest) access

25
Q

What uses Cognito Identity Pools to provide temporary AWS services access?

A

IAM credentials are obtained by Cognito Identity Pools through STS

26
Q

How can you get a fine grained control in Cognito Identity Pools?

A

Customizing the IAM policies based on the user_id

27
Q

What about roles in Cognito Identity Pools?

A
  • Default IAM roles, one for authenticated and one for guest users
  • Define rules to choose the role for each user based on the user’s ID
28
Q

What are Cognito Identity Pools policy variables?

A

You can partition your users’ access using policy variables

29
Q

How is access to permissions managed by Cognito Identity Pools?

A

Access to permissions is controlled by a role’s trust relationships

30
Q

What is Cognito Push Sync?

A

silently notify across all devices when identity data changes

31
Q

What is Cognito Stream?

A

stream data from Cognito into Kinesis

32
Q

What is Cognito Events?

A

execute Lambda functions in response to events

33
Q

How many datasets can you have in Cognito Sync?

A

up to 20 datasets to synchronize

34
Q

Where is data stored in Cognito Sync?

A

Store data in datasets (up to 1MB),