aws-auth
Adds user authentication to web and mobile apps with Amazon Cognito (user pools and identity pools) and the AWS Amplify client auth libraries. Covers sign-up/sign-in flows and the login page (Cognito-hosted UI / managed login), MFA, password policies, OAuth 2.0 / OIDC flows (auth-code + PKCE, client credentials), social/SAML federation, tokens (ID/access/refresh, rotation, revocation, storage), Cognito Lambda triggers, identity pools (temp AWS creds), and gating API Gateway (or ALB) routes to signed-in users via Cognito/JWT authorizers. Applies when adding a login or sign-up page, configuring a user pool or app client, choosing user pool vs identity pool, wiring social/SAML, refreshing tokens, requiring sign-in on an API Gateway or ALB, or debugging redirect_uri/token/MFA/CORS/federation errors. Does NOT cover Amplify Gen2 backend definitions (defineAuth, npx ampx → aws-amplify), IAM/STS/Identity Center (→ aws-iam), or API Gateway/Lambda resource config beyond the authorizer (→ aws-serverless).
- Version
- 1
Pinned to revision 764fd353c7f2, so it is the text this page describes rather than whatever the author pushed since.
Files
- skills/aws-auth/SKILL.md
- skills/aws-auth/references/api-authorization.md
- skills/aws-auth/references/identity-pools.md
- skills/aws-auth/references/lambda-triggers.md
- skills/aws-auth/references/managed-login-oauth.md
- skills/aws-auth/references/passkeys.md
- skills/aws-auth/references/threat-protection.md
- skills/aws-auth/references/tokens-and-sessions.md
- skills/aws-auth/references/troubleshooting.md
- skills/aws-auth/references/user-pools.md
Every link opens the file at its source, pinned to the revision this page describes.