JobCannon
全部技能

AWS Cognito Identity

⬢ 層級 2技術
高
薪資影響
7 個月
學習時長
中等
難度
—
職業
一覽

AWS Cognito provides user authentication (email/password, MFA, social login) via User Pools, and temporary AWS credentials via Identity Pools. You create a User Pool, configure password policies, MFA, email verification, then integrate into your app via SDK or hosted UI. Identity Pools map authenticated users to IAM roles for S3/DynamoDB access. Mastery means understanding User Pool flows, attribute mapping, custom auth flows, token management, and multi-tenancy. Learning path: Cognito basics (2 weeks) → User Pool setup (2 weeks) → Identity Pools (1 week) → advanced auth flows (2 weeks).

什麼是 AWS Cognito Identity

AWS Cognito is a managed authentication and authorization service. It has two parts: 1. User Pools, user management (sign-up, sign-in, password reset, MFA, email verification)

🔧 工具與生態
AWS Cognito ConsoleAWS Amplify SDKAmazon Cognito User PoolsAmazon Cognito Identity PoolsHosted UICustom Lambda AuthorizersMFAAWS SDK

💰 各地區薪資

地區初級中級高級
USA$80,000$130,000$180,000
UK£48,000£80,000£120,000
EU€52,000€85,000€130,000
CANADACA$85,000CA$135,000CA$185,000

❓ 常見問題

What's the difference between User Pools and Identity Pools?
User Pools handle authentication (sign-up, sign-in, MFA). Identity Pools provide AWS credentials (temp access to S3, DynamoDB). User Pool → ID token. Identity Pool → AWS credentials. Both needed for full auth flow.
Should I use Cognito or Auth0?
Cognito: cheaper, AWS-native, integrates seamlessly. Auth0: more polished, better UX, works with any backend. Cognito fine for AWS-first companies; Auth0 for multi-cloud or SaaS.
Can I use Cognito without the hosted UI?
Yes, use Amplify SDK or AWS SDK for custom UI. Hosted UI is simpler but less flexible.
How do I add social login (Google, GitHub) to Cognito?
Create an identity provider in Cognito console. Cognito handles the OAuth flow. You get ID/access tokens back.
What's the difference between ID token and access token?
ID token: identifies the user (contains user attributes). Access token: grants access to APIs (short-lived, 1 hour default). Refresh token: gets new tokens without sign-in.
Can I store custom user attributes in Cognito?
Yes, custom attributes (company_id, role, department). Map them to ID token claims. Use them in your app or Lambda authorizers.
Is Cognito suitable for production?
Yes, enterprise companies run Cognito at scale. Caveats: limited customization compared to Auth0, no built-in audit logs (use CloudTrail), MFA setup requires SMS costs.

不確定這項技能適不適合你？

做一下職業匹配，我們會推薦合適的方向。

找到最適合我的技能 →

找到理想的職業方向

在 2,521 個職業中進行技能匹配。免費。

免費做職業匹配 →