#cognito — Public Fediverse posts

オンプレミスからプライベートなAPI Gatewayを呼ぶ ― CognitoのTokenエンドポイントをAPI Gatewayでプロキシする構成
https://qiita.com/ajisawa/items/43dc7431773cab0b76b8?utm_campaign=popular_items&utm_medium=feed&utm_source=popular_items

#qiita #AWS #cognito #APIGateway #BIPROGY_AWS_SPARK

Claude CodeからAgentCore GatewayにEntra ID × CognitoでSSO接続するついでに認証認可の勉強をする
https://qiita.com/har1101/items/bfc2701ff74d89ec9dd2?utm_campaign=popular_items&utm_medium=feed&utm_source=popular_items

#qiita #AWS #cognito #MCP #ClaudeCode #AgentCore

For one of my clients I'm creating a highly scalable, globally distributed web application to display and edit some business choices used by internal #ETL document generators. The application runs on #AWS using #cognito as its user authentication mechanism. Did you know that callback script URLs for Cognito can't end in a slash? I didn't. If yours does, be prepared for a world of pain.

For one of my clients I'm creating a highly scalable, globally distributed web application to display and edit some business choices used by internal #ETL document generators. The application runs on #AWS using #cognito as its user authentication mechanism. Did you know that callback script URLs for Cognito can't end in a slash? I didn't. If yours does, be prepared for a world of pain.

AgentCore 上の Claude Code の出力を AppSync Event API でリアルタイムにブラウザへ流す
https://qiita.com/Kota__Sasaki/items/a5008e550de8fa01dc61?utm_campaign=popular_items&utm_medium=feed&utm_source=popular_items

#qiita #AWS #cognito #AppSync #AgentCore

Grafanaの管理者って6種類あんねん【Cognito連携】
https://qiita.com/melknzw/items/63d33ed4b6fe9fe9a922?utm_campaign=popular_items&utm_medium=feed&utm_source=popular_items

#qiita #AWS #OAuth #grafana #cognito #管理者権限

【AWS】Cognitoを利用したシンプルな認証機能付きのWebページの作成
https://qiita.com/yakumo_09/items/dee0d94ba53fac725c7e?utm_campaign=popular_items&utm_medium=feed&utm_source=popular_items

#qiita #AWS #S3 #CloudFront #cognito

Cognito、そのまま本番に出して大丈夫？デフォルト設定に潜む5つのセキュリティリスク
https://qiita.com/ntaka329/items/798659fd80c05c868670?utm_campaign=popular_items&utm_medium=feed&utm_source=popular_items

#qiita #AWS #Security #認証 #cognito

Bedrock AgentCoreとAmplifyでAI SDK + Next.jsなAIエージェントをスタイリッシュにホストする方法
https://qiita.com/moritalous/items/ea695f8a328585e1313b?utm_campaign=popular_items&utm_medium=feed&utm_source=popular_items

#qiita #cognito #Next_js #amplify #AISDK #AgentCore

GA版AgentCoreRuntimeにA2A対応AIエージェントをデプロイして詰まったこと!
https://qiita.com/Syoitu/items/9fc3d69e6ce3c7dd6884?utm_campaign=popular_items&utm_medium=feed&utm_source=popular_items

#qiita #cognito #bedrock #A2A #StrandsAgents #AgentCore

Amazon Bedrock AgentCoreのIdentityを深堀り！
https://qiita.com/moritalous/items/6c822e68404e93d326a4?utm_campaign=popular_items&utm_medium=feed&utm_source=popular_items

#qiita #AWS #cognito #OpenAI #bedrock #AgentCore

【小ネタ】AWS Cognito + CloudFrontで最低限の認証機能付きWebブラウザを実装しよう
https://qiita.com/mob_engineer/items/8719e0b85fa340352771?utm_campaign=popular_items&utm_medium=feed&utm_source=popular_items

#qiita #AWS #小ネタ #CloudFront #cognito

SDKでCognitoにアクセス時に「Access Token does not have required scopes」エラーが出た
https://qiita.com/kojiro513/items/042a534a9e5a71bf4fb1?utm_campaign=popular_items&utm_medium=feed&utm_source=popular_items

#qiita #Go #AWS #SDK #cognito #token

Cognitoを使用したOIDCログインとユーザー情報の取得
https://qiita.com/generoKoki/items/6e95ec9e3ab5ceafeb87?utm_campaign=popular_items&utm_medium=feed&utm_source=popular_items

#qiita #cognito #OIDC

Amazon CognitoのOIDC機能を活用してLINEログインを統合する方法
https://qiita.com/generoKoki/items/98d38bb6262ea1437796?utm_campaign=popular_items&utm_medium=feed&utm_source=popular_items

#qiita #AWS #cognito #OIDC

令和最新版(？) React + CloudFront + APIGateway でWebアプリを作成する方法のおさらい！
https://qiita.com/yu-Matsu/items/88d9aae18bbdce723a0a?utm_campaign=popular_items&utm_medium=feed&utm_source=popular_items

#qiita #AWS #CloudFront #cognito #React #APIGateway

Added AWS::Cognito::UserPool Policies SignInPolicy

User pool configurations now support choice-based authentication for passkey authenticators, passwordless OTPs, and password-based sign-in.
https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-cognito-userpool-policies.html#cfn-cognito-userpool-policies-signinpolicy #cognito #cloudformation

Added AWS::Cognito::UserPool Policies SignInPolicy

User pool configurations now support choice-based authentication for passkey authenticators, passwordless OTPs, and password-based sign-in.
https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-cognito-userpool-policies.html#cfn-cognito-userpool-policies-signinpolicy #cognito #cloudformation

Added AWS::Cognito::UserPoolClient ExplicitAuthFlows

App client configurations now support choice-based authentication for passkey authenticators, passwordless OTPs, and password-based sign-in.
https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-cognito-userpoolclient.html#cfn-cognito-userpoolclient-explicitauthflows #cognito #cloudformation

Added AWS::Cognito::UserPoolClient ExplicitAuthFlows

App client configurations now support choice-based authentication for passkey authenticators, passwordless OTPs, and password-based sign-in.
https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-cognito-userpoolclient.html#cfn-cognito-userpoolclient-explicitauthflows #cognito #cloudformation

Added AWS::Cognito::UserPoolDomain ManagedLoginVersion

You can set a user pool domain to version 2 for managed login branding or version 1 for hosted UI (classic) branding.
https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-cognito-userpooldomain.html#cfn-cognito-userpooldomain-managedloginversion #cognito #cloudformation

Added AWS::Cognito::UserPoolDomain ManagedLoginVersion

You can set a user pool domain to version 2 for managed login branding or version 1 for hosted UI (classic) branding.
https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-cognito-userpooldomain.html#cfn-cognito-userpooldomain-managedloginversion #cognito #cloudformation

Added AWS::Cognito::UserPool UserPoolTier

You can choose the Plus, Lite, or Essentials feature plan for user pools and get different levels of pricing and features.
https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-cognito-userpool.html#cfn-cognito-userpool-userpooltier #cognito #cloudformation

Added AWS::Cognito::UserPool UserPoolTier

You can choose the Plus, Lite, or Essentials feature plan for user pools and get different levels of pricing and features.
https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-cognito-userpool.html#cfn-cognito-userpool-userpooltier #cognito #cloudformation

Added AWS::Cognito::UserPool EnabledMfas

You can request or require email MFA in user pools. You must have an EmailSendingAccount of DEVELOPER.
https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-cognito-userpool.html#cfn-cognito-userpool-enabledmfas #cognito #cloudformation

Added AWS::Cognito::UserPool EnabledMfas

You can request or require email MFA in user pools. You must have an EmailSendingAccount of DEVELOPER.
https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-cognito-userpool.html#cfn-cognito-userpool-enabledmfas #cognito #cloudformation

I have an #AppSync API that I use to put and store user generated data that is authenticated using #Cognito. As part of the JWT payload there is a device ID that is unique to the signed in user on that device.

Mijn werk deze week tot nu toe.

Werkplek beheer met het invoeren van een bitlocker unlock key en het in het domein hangen van een laptop.

Terraform code schrijven voor het configureren van een cloud provider.

En daarnaast nog wat switch config checken, Linux server uitrollen, VM template maken, firewall regels aanpassen, SNMP config.

Hmm, misschien ben ik toch iets beter gekwalificeerd dan ik lang heb gedacht 🤔

#Tech #IT #Support #AD #Azure #Terraform #AWS #Cognito

Mijn werk deze week tot nu toe.

Werkplek beheer met het invoeren van een bitlocker unlock key en het in het domein hangen van een laptop.

Terraform code schrijven voor het configureren van een cloud provider.

En daarnaast nog wat switch config checken, Linux server uitrollen, VM template maken, firewall regels aanpassen, SNMP config.

Hmm, misschien ben ik toch iets beter gekwalificeerd dan ik lang heb gedacht 🤔

#Tech #IT #Support #AD #Azure #Terraform #AWS #Cognito

Ok another #aws #lambda question. I have a working local #Cognito call to get the groups. But doing the same thing on Lambda ends in a "The security token included in the request is invalid.".
I can reproduce the issue locally, but I don't get why. The lambda function has all permissions 🤷

Any reason the ACCESS_KEY and ACCESS_SECRET of a lambda function provided by $_ENV doesn't work the same way as a manually created one?

Ok another #aws #lambda question. I have a working local #Cognito call to get the groups. But doing the same thing on Lambda ends in a "The security token included in the request is invalid.".
I can reproduce the issue locally, but I don't get why. The lambda function has all permissions 🤷

Any reason the ACCESS_KEY and ACCESS_SECRET of a lambda function provided by $_ENV doesn't work the same way as a manually created one?

Ok, here is the plan: use cognito for registration and user management. Hopefully find out how to auth against my api and run a #dynamodb to count the useage. #AWS #Lamda #Cognito #php

Ok, here is the plan: use cognito for registration and user management. Hopefully find out how to auth against my api and run a #dynamodb to count the useage. #AWS #Lamda #Cognito #php

I have a simple API running on #AWS #Lamda. I already learned, that for auth I‘ll use #Cognito. Is there a service to count api calls to charge my customer based on usage?
#php

I have a simple API running on #AWS #Lamda. I already learned, that for auth I‘ll use #Cognito. Is there a service to count api calls to charge my customer based on usage?
#php

Amplify v6を使ってidTokenを取得し、headerに含めるやり方
https://qiita.com/shoki-y/items/ca156e18647f58862b37?utm_campaign=popular_items&utm_medium=feed&utm_source=popular_items

#qiita #TypeScript #cognito #React #amplify

Mais c'est une dinguerie (alors peut-être que ça existe depuis des années), l'authentification de services derrière ALB via Cognito directement sur un listener ALB.

Et c'est bien géré dans l'ALB Controller.

L'application qui reçoit n'a plus qu'à lire les headers rajoutés par l'ALB pour obtenir le sub de l'utilisateur Cognito.

Ça permet de protéger des apps qui ne gèrent pas DEX (ou autre), j'ai découvert ça dans la doc de Kubeflow pour EKS

#aws #eks #alb #cognito

Added AWS::Cognito::UserPool PreTokenGenerationConfig

You can update the version of your Lambda trigger event. Version 2 includes details to customize access tokens and ID tokens.
https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-cognito-userpool-pretokengenerationconfig.html #cognito #cloudformation

Added AWS::Cognito::UserPool PreTokenGenerationConfig

You can update the version of your Lambda trigger event. Version 2 includes details to customize access tokens and ID tokens.
https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-cognito-userpool-pretokengenerationconfig.html #cognito #cloudformation

Added AWS::Cognito::LogDeliveryConfiguration

You can configure a user pool to log detailed information about user errors to CloudWatch Logs.
https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-cognito-logdeliveryconfiguration.html #cognito #cloudformation

Why are single region only services still a thing?

Seriously considering building my own #aws #cognito replacement using #dynamodb global tables and #lambda (or #ecs).

#Serverless

Using Amazon Cognito Tokens for Fine-Grained Access Control

#cognito #aws #authentication
https://www.technometria.com/p/using-amazon-cognito-tokens-for-fine

Do I know anyone successfully talking to #Cognito using #boto3 (ideally without having control of the Cognito end)? Trying to figure out how refresh tokens work accessing someone else’s API (hence I cannot make any Cognito changes or look at the logs.) Trying to refresh the tokens breaks with “invalid refresh token” even though it’s the one they bloody sent me when the first auth succeeded!

Added AWS::Cognito::IdentityPoolPrincipalTag

AWS::Cognito::IdentityPoolPrincipalTag is a map of identity pool user claims to principal tags that you want to apply to your user's temporary session.
https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-cognito-identitypoolprincipaltag.html #cognito #cloudformation

#AWSCognito and #AWSS3 allow for subdomain hijacking / squatting. Please doublecheck spelling when communicating with #cognito and #s3 subdomains. #cybersecurity

TIL #aws #cognito and #ses are not available in every AWS region.

A lambda to get authorization tokens from Cognito... this can't be good right? There's no way this is a good idea...

#AWS #Cognito #Lambda #Cloud

I've updated the MVP rocketship template. If you want to build a #serverless #API on #AWS and protect it with #Cognito, you're welcome to duplicate and tinker with this template repository.

🚀 https://github.com/instantiator/mvp-rocketship-template

I've been using it for a while now and upstreamed some improvements today including test scripts to exercise your endpoints, and support for browser-based clients that need #CORS headers.

#APIGateway #Lambda #DynamoDb #DotNet #SAM #template #development #devops

I've been in a long drawn out trench war with #Cognito, #APIGateway, and #CORS. I'm pleased to say I've finally broken through enemy lines. Fun times with protected APIs ahead, and a long blog post coming soon... 🔥 #AWS #development #API

Certainly, this doesn't seem to be possible with @auth0, @Firebase or #cognito. There may be others out there that can do this - in which case, someone please point them out to me!

If you use Amazon Cognito for authentication I strongly recommend you start auditing your guest (unauthenticated) user access using this new feature. https://aws.amazon.com/about-aws/whats-new/2023/02/amazon-cognito-identity-pool-data-events-aws-cloudtrail/ #aws #security #cognito