Cognito for user authentication in AWS - Cheat Sheet & Quick Revision

Recall & Review

beginner

What is AWS Cognito used for?

AWS Cognito is a service that helps you add user sign-up, sign-in, and access control to your web and mobile apps easily.

beginner

What are the two main components of AWS Cognito?

User Pools (for user directory and authentication) and Identity Pools (for temporary AWS credentials to access other AWS services).

intermediate

How does AWS Cognito User Pool help secure an application?

It manages user registration and sign-in, verifies user identities, and issues JSON Web Tokens (JWT) to control access securely.

intermediate

What is the role of Identity Pools in AWS Cognito?

Identity Pools provide temporary AWS credentials to users so they can access AWS resources like S3 or DynamoDB securely.

intermediate

Why is it important to configure app clients in Cognito User Pools?

App clients define how your app interacts with the user pool, including allowed authentication flows and token expiration settings.

Which AWS Cognito component manages user sign-up and sign-in?

A User Pool

B Identity Pool

C S3 Bucket

D Lambda Function

User Pools handle user registration and authentication.

What type of token does Cognito User Pool issue after successful authentication?

A JWT (JSON Web Token)

B API Key

C OAuth Token

D Session Cookie

Cognito User Pools issue JWTs to securely represent user identity.

What is the main purpose of an Identity Pool in AWS Cognito?

A Store user passwords

B Manage user groups

C Provide temporary AWS credentials

D Send email notifications

Identity Pools provide temporary AWS credentials for accessing AWS services.

Which of the following is NOT a feature of Cognito User Pools?

A User registration and sign-in

B Password recovery

C Multi-factor authentication

D Temporary AWS credentials for S3 access

Temporary AWS credentials are provided by Identity Pools, not User Pools.

Why should you configure app clients in a Cognito User Pool?

A To store user data

B To define how your app authenticates users

C To create AWS Lambda functions

D To manage billing

App clients specify authentication flows and token settings for your app.

Explain the difference between AWS Cognito User Pools and Identity Pools.

Think about authentication vs authorization roles.

Describe how AWS Cognito helps secure a mobile or web application.

Focus on user identity and access control.