Skip to content

Latest commit

 

History

History
34 lines (32 loc) · 2.66 KB

File metadata and controls

34 lines (32 loc) · 2.66 KB

Amazon Cognito

Cognito provides authentication, authorization and user management for your web and mobile apps. Your users can sign in directly with an user name and password or through a third party such as Facebook, Amazon, Google and Apple

Useful Links

General Notes

  • Acts as an identity broker, handling all interaction with web identity providers
  • Some of the features provided:
    • Sign-up and sign-in to your apps
    • Access for guest users
    • Acts as an Identity Broker between your application and Web ID providers, so you don't need to write any additional code
    • Synchronizes user data for multiple devices
    • Recommended for all mobile apps running with AWS services
    • Multi-factor authentication
    • Email verification
      • You can customize the email using SES or use the default provided by Cognito
  • For third party providers, it provides temporary credentials which map to an IAM role, allowing access to the required resources
  • There's no need for the app to embed or store AWS credentials locally on the device, giving users a seamless experience across all devices
  • The two main components of Cognito are user pools and identity pools
    • User pools are user directories that provide sign-up and sign-in options for your app users
    • Identity pools enable you to grant your users access to other AWS services
    • You can use both separately or together
  • Cognito tracks the association between user identity and the various different devices they sign-in from and it uses push synchronization to push updates and synchronize user data across multiple devices
    • It uses SNS to send a silent push notification to all the devices associated with a given user identity whenever data stored in the cloud changes
  • Pricing
    • Pay as you go, no minimum fees or upfront commitments
    • User Pools
      • You pay based on your monthly active users (MAU)
      • Free tier includes 50,000 MAUs, doesn't expire at the end of the 12-month AWS free tier term
      • After 50,000 users you pay per MAU, according to region and tier, starting at $0.0055 per MAU from 50,001 to 100,000 users