Questions tagged [amazon-cognito]

Amazon Cognito is a simple user identity and data synchronization service that helps securely manage and synchronize mobile app data.

Amazon Cognito lets you add user sign-up, sign-in, and access control to your web and mobile apps quickly and easily. Amazon Cognito scales to millions of users and supports sign-in with social identity providers, such as Apple, Facebook, Google, and Amazon, and enterprise identity providers via SAML 2.0 and OpenID Connect.

Work Offline

You can use the optional Amazon Cognito client SDKs to automatically create a local data store to cache user app data on the device. This means your app can keep reading and writing data regardless of the device connectivity state.

Store and Sync across Devices

With Amazon Cognito you can easily synchronize app data across all of an end user’s devices. Amazon Cognito manages the complexity of conflict resolution and intermittent network connectivity so that your app can always deliver a great user experience.

Control Access to AWS Resources

You can use the unique user identifiers that Amazon Cognito generates in your access policies to enable or restrict access to other AWS resources on a per-user basis.

Safeguard AWS Credentials

When you use Amazon Cognito, the service takes care of all the steps necessary to create a unique identifier for your app’s users and retrieve temporary, limited privilege AWS credentials.

Interaction with other Amazon services AWS Cognito can interoperate with AWS SES, AWS SNS, AWS Lambda, and more.

http://aws.amazon.com/cognito/

7147 questions
3
votes
0 answers

Unable to Verify Cognito Token with Node

Cannot verify JWT Web-Token from Cognito. Here the steps which I tried to do: Get a Token from the Cognito-Userpool Login…
Daniel
  • 109
  • 1
  • 9
3
votes
1 answer

Is there a provision in Cognito that helps in determining whether a user has setup his MFA or not in a userpool?

If at user pool level MFA(TOTP) is enabled, for every user inside the pool MFA is by default enabled. I need to distinguish between users who have set up their MFA and users who still haven't set up the MFA. (setting up is registering the TOTP based…
Shwetabh Shekhar
  • 2,608
  • 1
  • 23
  • 36
3
votes
1 answer

How to I configure Okta as SAML IdP for AWS Cognito Identity Pool?

I want to configure Okta as a SAML IdP for an AWS Cognito Identity Pool (not a User Pool). When creating an Identity Pool, I need to specify a SAML IdP associated with the AWS account. As part of defining an IdP, I need to provide a metadata…
John
  • 10,837
  • 17
  • 78
  • 141
3
votes
1 answer

How dynamically add arn cognito to lambda?

I would like to add the cognito authorizer to my lambda function, but for this I need arn cognito, which is created in the stack coud formation(CognitoUserPool in my resources section). I'm using serverless framework. part of the serverless.yml…
3
votes
2 answers

Create AWS Cognito user with account status "CONFIRMED" and without email address

How can I create a Cognito user with the account status confirmed using c#? After a user is created the account status displays FORCE_CHANGE_PASSWORD. Another thing is I need to create user without email address. AmazonCognitoIdentityProviderClient…
DineshNS
  • 3,490
  • 5
  • 26
  • 28
3
votes
2 answers

Why AWS cognito asks me to which appclient to use everytime?

I am using AWS cognito for authentication purpose. Every time i hit the cognito domain name it asks me to select the the App client. Is there a way i can stop cognito asking me to select the Appclient i want to use for authentication. please do let…
Vishnu Ranganathan
  • 1,277
  • 21
  • 45
3
votes
0 answers

How do I create a valid AWS token to make a request to ElasticSearch using a Cognito identity?

I want to make a request to an AWS ElasticSearch instance. The instance has access control to allow access to one or more AWS accounts or IAM users. The role represents a Cognito Identity pool that has a Cognito User Pool as authentication…
user1283776
  • 19,640
  • 49
  • 136
  • 276
3
votes
1 answer

How to use the aws-sdk in nativescript 6.0?

I am currently using nativescript 6.0.2 to build a cross-platform app and I need to be able to upload files to s3 using aws-cognito authentication to upload. I have tried installing the javascript aws-sdk using npm install but I am getting these…
3
votes
2 answers

AWS API Gateway: API available for authenticated and guest users only

I'm quite new to AWS and I try to understand some basic concepts. In my Android app, I use: Cognito User Pool and Identity Pool to allow my users to register and sign in, but also to use the app as guest users API Gateway and AWS Lambda to create…
matteoh
  • 2,810
  • 2
  • 29
  • 54
3
votes
1 answer

Give Lambda fine grained access to DynamoDB based on Cognito Credentials

I currently have a number of Lambdas which query a DynamoDB. The Lambda is exposed/invoked via an API Gateway REST API which is configured to use AWS_IAM authorization. My Cognito user pool is currently assigning different IAM roles based on various…
Mark McKim
  • 553
  • 1
  • 5
  • 9
3
votes
0 answers

How do I use kinesis firehose from iOS without the user creating a username and password?

I'm building out an SDK in Swift that collects data from a phone and sends it to AWS. However, there will be a lot of "stream" data and the user will not have to sign in to anything as it will run silently in the app. My current implementation sends…
3
votes
2 answers

Is there any way to generate cognito auth token for user without providing password in aws-sdk or aws-amplify?

I'm using AWS Cognito for user management. I want to generate auth token for user without providing password. Is there any way to do this? From aws-sdk or aws-amplify. I have found AdminInitiateAuth method from aws-sdk but it requires…
Shivam Kubde
  • 545
  • 1
  • 8
  • 17
3
votes
1 answer

How do I fix Malformed authentication header error coming from Apollo client

I'm trying to connect my react app to a hasura backend api with Apollo Client, but I recieve the following error: Error: GraphQL error: Malformed Authorization header I have no idea what is causing it. I know I'm getting a valid id token from…
3
votes
3 answers

Cognito Identity Credentials are not authorized to perform action on Kinesis video resource

I am trying to allow access to a Kinesis video stream using Cognito Identity Pools, but get an AccessDeniedException when calling GetDataEndpoint. IAM Role Policy Doc: { "Sid": "Stream", "Effect": "Allow", "Action": [ …
3
votes
1 answer

Blazor Server Hosted - Configure OpenId Connect with AWS Cognito

I'm trying to setup Blazor (server side - Preview 6) with AWS Cognito. Unfortunately, I don't have much experience with ASP.NET Core or OAuth/OpenId. It's currently at the point where I can click on the OpenIdConnect button and the user…
Mitkins
  • 4,031
  • 3
  • 40
  • 77