Skip to content

Cognito Federated Identity Pool

Cognito Identity Pools (Federated Identity)

  • Provide AWS credentials to users so they can access AWS resources directly
  • Integrate with Cognito User Pool as an [[identity provider]]
  • Goal
    • Provide direct access to AWS Resources from the Client Side
  • How
    • Log in to federated identity provider - or remain anonymous
    • Get temporary AWS credentials back from the Federated Identity Pool
    • These credentials come with a pre-defined IAM Policy stating their permissions
  • Example
    • provide (temporary) access to write to AWS S3 Bucket using Facebook Login

For Public Applications

  • Goal:
    • Provide direct access to AWS Resources from the Client Side
  • How:
    • Log in to federated [[identity provider]] - or remain anonymous
    • Get temporary AWS credentials back from the Federated Identity Pool
    • These credentials come with a pre-defined IAM Policy stating their permissions
  • Example
    • provide (temporary) access to write to S3 bucket using Facebook Login
  • Note