Web identity federation

Question 1

What is cognito?

Answer 1

Its a service which handles interactions between the users and third party providers like Google and facebook, to enable open authentication.

Question 2

What is federation?

Answer 2

Federation allows users to use their existing accounts with Google or Facebook to access resources in aws. The user authenticates with facebook or Google, which is then converted to a temporary IAM role to use in AWS

Question 3

what is the difference between userpool and identity pool?

Answer 3

User Pool is based on the user, it handles things like registration, authentication and account recovery.
Identity pool authorise access to aws resources