capabilities.work

What you can do with Amazon Cognito

Every task in plain language. Pick one, and we can help you get access.

126 things you can do

Amazon Cognito

Amazon Cognito is a fully managed AWS user identity and authentication service that adds sign-up, sign-in, and access control to web and mobile applications, scaling to millions of users. It provides User Pools for authentication (user directories, MFA, customizable auth flows) and Identity Pools for authorization (federated identities that dispense temporary AWS credentials), with support for OAu

Identity & Access Management

Add custom attributes to a user poolAdd a user to a groupConfirm a user's sign-up as an administratorCreate a new user as an administratorDelete a user as an administratorDelete attributes from a user as an administratorUnlink a federated user from a local userDisable a user accountRe-enable a disabled userForget a user's remembered device as an adminStart sign-in for a user from a backend serverLink a federated identity to an existing userRemove a user from a groupForce a password reset for a userAnswer a sign-in challenge from a backend serverSet a user's MFA preference as an adminSet a user's password as an adminSet a user's legacy SMS MFA options as an adminMark a user's sign-in event as valid or invalidChange a user's device remembered status as an adminUpdate a user's attributes as an adminSign a user out of all devices as an adminStart setting up an authenticator app for MFAChange the signed-in user's passwordConfirm and start tracking a new deviceSet a new password with a reset codeConfirm a self sign-up with a codeCreate a user groupAdd a third-party identity provider to a user poolCreate a resource server with OAuth scopesCreate a job to bulk import usersCreate a new user poolCreate an app client for a user poolCreate a hosted UI domain for a user poolDelete a user groupRemove a third-party identity providerDelete a resource serverLet a signed-in user delete their own accountLet a signed-in user delete their own attributesDelete a user poolDelete an app clientDelete a user pool's hosted UI domainLet a signed-in user forget one of their devicesSend a forgotten-password reset codeSend a verification code for a user attributeSign the current user out of all devicesStart sign-in for a user from the client appResend a sign-up confirmation codeAnswer a sign-in challenge from the client appRevoke a refresh tokenConfigure log delivery for a user poolConfigure advanced security risk settingsCustomize the hosted UI look and logoLet a signed-in user set their MFA preferenceSet a user pool's MFA configurationSet the signed-in user's legacy SMS MFA optionsRegister a new user through self sign-upStart a user import jobStop a running user import jobTag a user poolRemove tags from a user poolGive feedback on a sign-in event with a tokenLet a signed-in user change a device's remembered statusUpdate a group's role, description or precedenceUpdate a third-party identity providerUpdate a resource server's name or scopesLet a signed-in user update their own attributesUpdate a user pool's settingsUpdate an app client's settingsUpdate the certificate on a custom domainVerify an authenticator app code to finish MFA setupVerify a user attribute with a codeCreate an identity pool for federated usersDelete identities from an identity poolDelete an identity poolGenerate or retrieve a Cognito identity IDGet an OpenID token for a developer-authenticated userMerge two developer-authenticated usersSet the IAM roles for an identity poolMap user attributes to principal tagsTag an identity poolUnlink a developer user from an identityUnlink a federated login from an identityRemove tags from an identity poolUpdate an identity pool's settingsGet a user's device as an adminLook up a user by username as an adminList a user's devices as an adminList the groups a user belongs toView a user's sign-in history and risk eventsGet a third-party identity provider's settingsGet a resource server and its scopesGet a user pool's advanced security risk settingsCheck the status of a user import jobGet a user pool's configurationGet an app client's settingsGet details of a user pool domainGet the CSV header for a user import fileLet a signed-in user view one of their devicesGet a group's detailsFind an identity provider by its identifierGet a user pool's log delivery settingsGet a user pool's SAML signing certificateGet hosted UI customizationGet the signed-in user's profileGet a user pool's MFA configurationLet a signed-in user list their devicesList the groups in a user poolList the identity providers on a user poolList the resource servers in a user poolList tags on a user poolList user import jobsList the app clients of a user poolList user pools in the accountList and search users in a user poolList the members of a groupLook up details of a single identityGet an identity pool's configurationGet temporary AWS credentials for an identityGet the IAM roles assigned to an identity poolGet an OpenID token for an identityView principal tag mappings for a providerList the identities in an identity poolList identity pools in the accountList tags on an identity poolFind the identity for a developer user identifier