AWS re:Post Knowledge Center Spotlight: Amazon Cognito

The AWS re:Post Knowledge Center is your one-stop-shop for authoritative, up-to-date guidance on using AWS services. This month, we're highlighting Amazon Cognito, an identity platform for web and mobile apps. It’s a user directory, an authentication server, and an authorization service for OAuth 2.0 access tokens and AWS credentials.

With Amazon Cognito, you can authenticate and authorize users from the built-in user directory, from your enterprise directory, and from consumer identity providers like Google and Facebook. Whether you're new to Amazon Cognito or an experienced user, the following Knowledge Center articles equip you with the skills and troubleshooting tips to get the most out of this developer-centric and cost-effective service.

Troubleshooting SAML responses and confirming users

This group of articles cover how to troubleshoot invalid SAML response errors and automatically confirm users in Amazon Cognito.

How do I troubleshoot invalid SAML response errors users might receive when they federate into Amazon Cognito?

How do I automatically confirm users in Amazon Cognito?

Customizing email senders and handling AWS Lambda triggers

This group of articles explain how to use the custom email sender Lambda trigger, troubleshoot errors related to Lambda triggers, and pass ClientMetadata to Lambda triggers in Amazon Cognito.

How do I use the custom email sender Lambda trigger in Amazon Cognito user pools?

How do I troubleshoot errors related to Lambda triggers in Amazon Cognito?

How do I pass ClientMetadata to Lambda triggers in Amazon Cognito?

Granting AWS service access and resetting passwords

This group of articles discuss how to use Amazon Cognito to identity pools to grant users access to AWS services and how to reset user passwords using the AWS CLI.

How do I use Amazon Cognito identity pools to grant users access to AWS services?

How do I reset user passwords in Amazon Cognito using the AWS CLI?

Configuring authentication and troubleshooting MFA errors

This group of articles cover setting up an Application Load Balancer to authenticate users through an Amazon Cognito user pool, increase security with MFA settings, and troubleshooting MFA errors.

How do I set up an Application Load Balancer to authenticate users through an Amazon Cognito user pool?

How do I increase security in Amazon Cognito by using MFA settings for users and user pools?

How do I troubleshoot MFA errors in my Amazon Cognito user pool?

Troubleshooting custom domains, email settings, and email verification

This group of articles address troubleshooting issues with custom domains, email settings, and the email_verified attribute in Amazon Cognito.

How do I troubleshoot errors when I create a custom domain in Amazon Cognito?

How do I troubleshoot issues with sending email messages in Amazon Cognito with default email settings compared to Amazon SES?

How do I troubleshoot issues with an Amazon Cognito user's email_verified attribute?

Revoking tokens and troubleshooting refresh token errors

This group of articles explain how to revoke refresh tokens and troubleshoot Invalid Refresh Token errors in Amazon Cognito.

How do I revoke refresh tokens issued by Amazon Cognito?

How do I troubleshoot an "Invalid Refresh Token" error from my Amazon Cognito user pool API?

Integrating identity providers and troubleshooting user migration issues

This group of articles cover how to get OIDC or social identity provider–issued tokens, and troubleshoot user migration Lambda trigger errors in Amazon Cognito.

How do I get OIDC or social identity provider–issued tokens after integrating the identity provider with Amazon Cognito?

How do I troubleshoot Amazon Cognito user migration Lambda trigger errors?

Preventing user existence errors and integrating Amazon SES

This group of articles discuss the effects of the Prevent User Existence Errors setting and how to integrate Amazon SES with an Amazon Cognito user pool.

What are the effects of turning on the Prevent User Existence Errors setting in Amazon Cognito?

How do I integrate Amazon SES with an Amazon Cognito user pool?

Integrating Amazon Cognito user and identity pools, confirming accounts, and recovering passwords

This group of articles explain how to integrate a multi-Region and multi-account Amazon Cognito user pool with an Amazon Cognito identity pool, confirm user accounts, and recover user passwords.

How do I integrate a multi-Region and multi-account Amazon Cognito user pool with an Amazon Cognito identity pool?

How do I confirm a user account in Amazon Cognito?

How do I recover a user password in Amazon Cognito?

Using Amazon Cognito for authorization and troubleshooting import processes

This group of articles cover setting up an Amazon Cognito user pool as an API Gateway authorizer, using the forgot password flow, and troubleshooting common errors with the import process in Amazon Cognito.

How do I set up an Amazon Cognito user pool as an authorizer on an API Gateway REST API?

How do I use the forgot password flow in Amazon Cognito?

How do I check CloudWatch logs for errors when I import users into a user pool from a CSV file?

How do I check CloudWatch logs for errors when I import users into a user pool with an AWS Lambda trigger?

How do I troubleshoot common errors with the import process in Amazon Cognito?

Logging and troubleshooting Cognito integration with IAM Identity Center and API Gateway

This group of articles discuss checking CloudWatch logs for errors when importing users, troubleshooting the logout endpoint and GlobalSignOut API, and configuring and troubleshooting API Gateway integrations with Amazon Cognito.

What's the difference between the logout endpoint and the GlobalSignOut API in Amazon Cognito?

How do I integrate IAM Identity Center with an Amazon Cognito user pool?

How do I configure and troubleshoot API Gateway integrations with Amazon Cognito?

Have more questions about Amazon Cognito?

Check out the re:Post Amazon Cognito knowledge base or ask your own question to get guidance from the AWS community.