JobCannon
Alla kompetenser

AWS Cognito Identity

⬢ NIVÅ 2Tekniskt
Hög
Lönepåverkan
7 månader
Tid att lära sig
Medel
Svårighetsgrad
—
Karriärer
I korthet

AWS Cognito provides user authentication (email/password, MFA, social login) via User Pools, and temporary AWS credentials via Identity Pools. You create a User Pool, configure password policies, MFA, email verification, then integrate into your app via SDK or hosted UI. Identity Pools map authenticated users to IAM roles for S3/DynamoDB access. Mastery means understanding User Pool flows, attribute mapping, custom auth flows, token management, and multi-tenancy. Learning path: Cognito basics (2 weeks) → User Pool setup (2 weeks) → Identity Pools (1 week) → advanced auth flows (2 weeks).

Vad är AWS Cognito Identity

AWS Cognito is a managed authentication and authorization service. It has two parts: 1. User Pools, user management (sign-up, sign-in, password reset, MFA, email verification)

🔧 VERKTYG & EKOSYSTEM
AWS Cognito ConsoleAWS Amplify SDKAmazon Cognito User PoolsAmazon Cognito Identity PoolsHosted UICustom Lambda AuthorizersMFAAWS SDK

💰 Lön per region

OmrådeNybörjareMidErfaren
USA$80k$130k$180k
UK£48k£80k£120k
EU€52k€85k€130k
CANADAC$85kC$135kC$185k

❓ Vanliga frågor

What's the difference between User Pools and Identity Pools?
User Pools handle authentication (sign-up, sign-in, MFA). Identity Pools provide AWS credentials (temp access to S3, DynamoDB). User Pool → ID token. Identity Pool → AWS credentials. Both needed for full auth flow.
Should I use Cognito or Auth0?
Cognito: cheaper, AWS-native, integrates seamlessly. Auth0: more polished, better UX, works with any backend. Cognito fine for AWS-first companies; Auth0 for multi-cloud or SaaS.
Can I use Cognito without the hosted UI?
Yes, use Amplify SDK or AWS SDK for custom UI. Hosted UI is simpler but less flexible.
How do I add social login (Google, GitHub) to Cognito?
Create an identity provider in Cognito console. Cognito handles the OAuth flow. You get ID/access tokens back.
What's the difference between ID token and access token?
ID token: identifies the user (contains user attributes). Access token: grants access to APIs (short-lived, 1 hour default). Refresh token: gets new tokens without sign-in.
Can I store custom user attributes in Cognito?
Yes, custom attributes (company_id, role, department). Map them to ID token claims. Use them in your app or Lambda authorizers.
Is Cognito suitable for production?
Yes, enterprise companies run Cognito at scale. Caveats: limited customization compared to Auth0, no built-in audit logs (use CloudTrail), MFA setup requires SMS costs.

Osäker på om den här kompetensen passar dig?

Gör Career Match — vi föreslår rätt spår för dig.

Hitta mina bäst passande kompetenser →

Hitta din ideala karriärväg

Kompetensbaserad matchning mot 2 521 karriärer. Gratis, ~3 minuter.

Gör Karriärmatchningen — gratis →