Cognito User Pools Learning Path

Struggling to find a solution for Secure Access? Building authentication is no longer enough, you need a simple and secure user sign-up, sign-in, and access control. Cognito provides authentication, authorization, and user management for your web and mobile apps. Your users can sign in directly with a user name and password, or through a third party such as Facebook, Amazon, Google or Apple.

Cognito has two main components: user pool and identity pool. You can use identity pools and user pools separately or together.

l  User pools are user directories that provide sign-up and sign-in options for your app users.

l  Identity pools enable you to grant your users access to other AWS services.

Use "user pools" for authentication

You can allow your users to authenticate using user pools.

Your users can log in directly through the user pool,

You can also log in indirectly through a third-party identity provider (IdP).

Use user pools to access your own resources

Your app exchanges the user pool tokens for AWS credentials through an identity pool.

After successful authentication, your web or mobile application will receive a bearer token from Amazon Cognito. Your app user can then use those credentials to access other services.