web_identity_federation

Question 1

What is Web Identity Federation?

Answer 1

• Allows users to authenticate with web identity providers (e.g., Google, Facebook, Amazon).
• An authentication token (JWT token) is exchanged for temporary AWS credentials.
• Users can assume an IAM role with permission to access AWS resources.

Question 2

What role does Cognito play in web identity federation?

Answer 2

• Acts as an identity broker.
• Handles interaction with web identity providers.
• Provides sign-up, sign-in, and guest user access functionalities.
• AWS recommended approach for web identity federation for mobile applications.

Question 3

What are the differences between User Pools and Identity Pools in Amazon Cognito?

Answer 3

User Pools:
- Manages sign-up and sign-in functionality for mobile and web applications.
Identity Pools:
- Provides temporary AWS credentials.
- Enables access to AWS services like S3 or DynamoDB.

Question 4

How does Cognito Push Synchronization work?

Answer 4

• Uses SNS to send silent push notifications of user data updates.
• Updates are sent to multiple devices associated with a single UserID.
• For example, a change of address triggers a push notification to all devices linked to the user’s account.