What does Cognito do?
Manage federation for mobile apps
Cognito pools manage sign-in, sign-up and guest access
Cognito supports push synchronisation to synchronise data between a user’s device
What kind of IAM policies are available?
Managed policies, customer managed policies and inline policies
What API is used for web-based federation?
assume-role-with-web-identity
How can STS credentials be referred to programmatically?
With the AssumeRoleUser ARN and AssumedRoleId fields