Application security on AWS with Amazon Cognito (June 2017)

Amazon Cognito is a managed service from AWS that is used to add authentication and authorization features to web and mobile applications. Cognito could be used as Identity Provider (User Pool) where it keeps and maintains users. And it could be used as Identity Broker (Identity Federation) by federating authentication to third-party identity provider like social media accounts or enterprise IDP

In this course we will have a closer look at Amazon Cognito and understand the basics and what authentication and authorization features Cognito has to offer.

This course is a series of hands-on labs focused primarily on the objectives below:

• Create and manage Cognito user pools and identity federation
• Implement API Gateway resources security using Cognito User Pool
• Implement identity federation to authenticate users using OAuth
• Implement web client code to authenticate users and access secured AWS services
• Implement role-based authorization using identity federation and IAM roles