AWS Cognito User Pools

• Create a serverless login service that can integrate with your web app
• Has some of the feature:
  • Username (or email) / password login
  • Password reset
  • Email & phone number verification
  • MFA
  • OAuth from Facebook, Google, SAML
  • Block user credentials that are compromised
• Login sends back a JWT

Integration

• Integrates with API Gateway and Application Load Balancer natively

Lambda Triggers

• Can trigger lambda synchronously on some of the event, for example
  • Pre-authentication lambda
  • Post-authentication lambda
  • Pre-signup, ...

Hosted Authentication UI

• Can use the default login / signup UI without having to code login and signup