Amazon Cognito: The Complete Introduction

Name: Amazon Cognito: The Complete Introduction
Rating: 4.2 (449 reviews)

Application security in AWS with Cognito service which provides identity, authentication and access control features.

Created byCloud Shikshak

Last updated 5/2023

English

English [Auto],Portuguese [Auto],

What you'll learn

Understand Amazon Cognito core features and its main components: User pool and Identity pool
Utilize Cognito user pool's hosted UI for sign-up, sign-in, forgot password, change password, email/phone verification and other flows
Implement federation or single-sign-on feature for your application with social identities like Facebook
Use role-based authorization to access AWS services directly from the mobile or web application
Secure API Gateway API by only allowing authorized users to invoke the API
Common usage scenario for Amazon Cognito user pool and identity pool

Course content

4 sections • 23 lectures • 1h 34m total length

Course Introduction2:09
Master Amazon Cognito fundamentals through a hands-on, security-focused course that demonstrates authentication and authorization, and configures user and identity pools with practical code.
Identity2:52
Identity anchors app security and value by tying authentication, authorization, and data ownership to a scalable, user-friendly experience.
Cognito Overview2:25
Explore how Amazon Cognito delivers authentication, authorization, and user management via user pools, social logins, and Lambda triggers, then provides temporary AWS credentials for secure serverless apps.
User Pool and Identity Pool2:02
Explore Amazon Cognito's user pool and identity pool, enabling sign up with username and password or single sign-on via Facebook, Google, Amazon, or SAML, with tokens for secure access.

What is User Pool?3:23
Describe how a Cognito user pool acts as a directory for app users, enabling sign up and sign in, and multifactor authentication workflows, verifications, lambda triggers, and social sign in.
Create a User Pool7:19
Create a user pool in Amazon Cognito by configuring attributes, sign-in options, and verification settings. Learn about password policies, multi-factor authentication, admin approval, lambda triggers, and messaging customization.
Users and Groups1:06
Explore managing users and groups in general settings, with one user in multiple groups, sign up via your app's UI, testing via the console, and roles inherited by group members.
Hosted UI10:07
Use the Cognito hosted user interface to manage sign up, sign in, and password flows with app client and domain. Authenticate to obtain tokens and learn code and implicit grant.
Tokens3:08
Explore how Amazon Cognito returns ID, access, and refresh tokens after authentication, and how JWT-based tokens carry claims, including user identity and token scope for secure access.
OAuth Flows5:08
Understand the three OAuth flows—implicit grant, authorization code grant, and client credentials grant—and learn how tokens are issued, exchanged, and refreshed to secure web and machine-to-machine access.
Customize Flow using Lambda Triggers2:59
Discover how to customize Amazon Cognito flows with lambda triggers across sign-up, authentication, and migration, including pre sign-up, custom message, post confirmation, pre authentication, and pre token generation.
Federation9:21
Explore federation in Amazon Cognito, enabling single sign-on with Facebook, Google, and other identity providers; learn how Cognito mediates tokens and maps attributes to user profiles.
Using the Tokens2:18
Explore how Cognito tokens enable direct resource access, API gateway validation, and identity pool exchanges for temporary credentials, with jwt verification and permission checks.
Securing API Gateway Requests8:48
Learn to secure API gateway with Cognito user pool tokens, validating ID and access tokens to grant authenticated users access to Lambda or other resources, and configure authorizers and deployment.

What is Identity Pool?3:23
Explore how identity pools provide temporary credentials and granular access by mapping users to roles and supporting authenticated and unauthenticated access, unlike user pools that handle authentication.
Create an Identity Pool2:27
Identity Pool with Facebook IDP14:38
Authenticate with Facebook via the Facebook SDK, obtain tokens, and exchange them for temporary Cognito credentials from an identity pool; use these to add items to DynamoDB without API Gateway.
Identity Pool with User Pool5:36
Use an identity pool with a user pool to exchange id and access tokens for temporary AWS credentials, enabling adding items to a DynamoDB table via hosted UI authentication.
Common Usage Scenario1:22
Explore the common usage scenarios for Amazon Cognito, including identity pools with api gateway authorizers and token validation, user pools with customer validation, and obtaining credentials from identity pools.

Pricing1:32
Explore Cognito pricing: pay for user pool MAUs, with 50,000 free MAUs and a free tier; sign-ins via SAML/OpenID Connect or social providers cost 0.05 per user.
Cleaning up0:42
Clean up the demo environment after Cognito setup by deleting user pools, identity pools, API Gateway, Lambda functions, IAM rules, Facebook apps, DynamoDB, and S3 or CloudFront.
Thank You!0:21
Get started with Amazon Cognito to make your applications more secure, and reach out with any questions or feedback.
What's Next? (And a BONUS!!!)0:54

Requirements

Basic understanding of AWS
Basic programming skills to follow labs
High level understanding of basic security concepts like authentication, authorization and identity

Description

Implementing security for your application is not easy, starting with managing username and password in a database it quickly gets complicated with authentication flows, access control and token management. Amazon Cognito provides a simple and secure way to add authentication and access control to your application. Amazon Cognito is a serverless service and scales to millions of users without any further configuration. Amazon Cognito supports sign-in with social identity providers like Facebook, Google, and Amazon and enterprise identity providers via SAML 2.0.

Some of the core features of Amazon Cognito are:

Secure and scalable user directory
Identity federation with social and enterprise identity providers
Access control for AWS resources
Easy integration with SDK and built-in UI

This course is a technical hands-on course to use Amazon Cognito for securing your application. The primary objectives of this course are:

Understand the importance of identity, authentication and authorization
Understand Amazon Cognito's core features
Detailed look at tokens and token management
Add single-sign-on feature to our application
Secure API gateway API using Cognito user pool authorizer
Understand and implement Amazon Cognito identity pool to securely access AWS services or other backend resources directly from application
Implement identity pool with user pool and other identity providers like Facebook, Amazon, etc.
Common usage scenario for user pool and identity pool

All the source code for the lab exercises is attached to the first section and individual lab lecture.

Who this course is for:

Software architects who want to understand Amazon Cognito core concepts and usage scenario
Developers who want to implement security in AWS with Amazon Cognito

Amazon Cognito: The Complete Introduction

What you'll learn

Explore related topics

Course content

Overview4 lectures • 9min

User Pool10 lectures • 54min

Identity Pool5 lectures • 27min

Wrap Up4 lectures • 3min

Requirements

Description

Who this course is for: