AWS Cognito

Amazon Cognito provides a fully managed authentication and access‑control service that can be integrated into web and mobile applications, as well as AI agents and microservices. It stores user credentials, supports sign‑up and sign‑in flows, and enables role‑based access to AWS resources. The service handles both human and machine identities, allowing developers to manage authentication for customers, B2B users, and automated workloads from a single platform.

The offering includes federation with social identity providers, passwordless login via WebAuthn passkeys, and one‑time passwords sent by SMS or email. It also supports tenant‑based identity stores, giving each application its own isolated user directory. Advanced security features such as adaptive authentication and compliance tooling are built in, and the service scales to handle billions of authentications per month.

Developers use Cognito to create branded sign‑in experiences, reduce the need for custom identity infrastructure, and simplify security architecture across diverse client types. Its tight integration with other AWS services, including Bedrock Agent Core Identity, enables secure access to AWS and third‑party resources without additional identity providers.