AWS Cognito is a managed authentication and authorization service. It has two parts: 1. User Pools — user management (sign-up, sign-in, password reset, MFA, email verification)