
Cognito
This handles AWS Cognito user authentication and authorization, covering both user pools for sign-up/sign-in and identity pools for temporary AWS credentials. You'll reach for it when setting up OAuth flows, managing user attributes, or integrating social logins. The source walks through practical patterns like creating pools with password policies, implementing SRP authentication (the secure way, not just username/password), and getting temporary credentials for API access. One thing to note: Cognito's token handling gets fiddly fast, especially the secret hash calculation for app clients, so having the Python snippets for sign-up and auth flows saves you from fumbling through docs. The security advice is solid too: enable MFA, keep token lifetimes short, and never expose client secrets in frontend code.
- skills.sh installs
- 188
- GitHub stars
- 1.2K
- last updated
- Aug 21, 2026
Install
$ npx -y skills add itsmostafa/aws-agent-skills --skill cognito --agent claude-codeInstalls into .claude/skills of the current project.
Files
AWS Cognito
Amazon Cognito provides authentication, authorization, and user management for web and mobile applications. Users can sign in directly or through federated identity providers.
Table of Contents
Core Concepts
User Pools
User directory for sign-up and sign-in. Provides:
- User registration and authentication
- OAuth 2.0 / OpenID Connect tokens
- MFA and password policies
- Customizable UI and flows
Identity Pools (Federated Identities)
Provide temporary AWS credentials to access AWS services. Users can be:
- Cognito User Pool users
- Social identity (Google, Facebook, Apple)
- SAML/OIDC enterprise identity
- Anonymous guests
Tokens
| Token | Purpose | Lifetime |
|---|---|---|
| ID Token | User identity claims | 1 hour |
| Access Token | API authorization | 1 hour |
| Refresh Token | Get new ID/Access tokens | 30 days (configurable) |
Common Patterns
Create User Pool
AWS CLI:
Sponsors
Details
- Repository
- github.com/itsmostafa/aws-agent-skills
- Categories
- Backend & APIs, Security, AI & Agent Building, Cloud & Infrastructure
- License
- MIT
- First seen
- Jun 3, 2026