Amazon Cognito

Amazon Cognito now supports machine-to-machine authorization without a user pool domain

Amazon Cognito now supports the GetClientToken API operation, enabling app clients to obtain access tokens for machine-to-machine (M2M) authorization directly through the AWS SDK, CLI, or API — without configuring a user pool domain.

Amazon Cognito adds admin API operation to reset user TOTP configurations

Amazon Cognito now provides a new admin API operation to reset a user's time-based one-time Password (TOTP) multi-factor authentication (MFA) configuration.

Amazon Cognito now available as a skill in the Agent Toolkit for AWS

Amazon Cognito is now available as a core skill (aws-auth) in the Agent Toolkit for AWS. AI coding agents using the toolkit can now set up, configure, secure, and troubleshoot Amazon Cognito using best-practice workflows, helping developers implement secure sign-in flows for…

Amazon Cognito now supports importing users with password hashes

in CSV user imports. Previously, users imported from a CSV file had to reset their passwords on first sign-in. Now, you can include password hashes in your CSV file so that imported users can sign in immediately with their existing credentials.

Amazon Cognito now supports self-service provisioned API rate limits

Amazon Cognito now allows you to increase or decrease your provisioned API rate limits on demand.

Amazon Cognito now supports customer managed key for encryption at rest

Amazon Cognito now supports customer managed keys in AWS Key Management Service (KMS) for encrypting user pool data at rest.

Amazon Cognito now supports multi-Region replication

, enabling you to synchronize user and machine identity data — including credentials, user pool configurations, and federation setups — to a secondary user pool in a standby Region you designate in near real-time.

Amazon Cognito is now available in Asia Pacific (Taipei) and Asia Pacific (New Zealand) Regions

Amazon Cognito is now available in the AWS Asia Pacific (Taipei) and Asia Pacific (New Zealand) Regions.

Amazon Cognito enhances client secret management with secret rotation and custom secrets

Amazon Cognito enhances client secret lifecycle management for app clients of Cognito user pools by adding client secret rotation and support for custom client secrets.

Amazon Cognito introduces inbound federation Lambda triggers

that enable you to transform and customize federated user attributes during the authentication process.

AWS expands Resource Control Policies support for Cognito and CloudWatch Logs

AWS Resource Control Policies (RCPs) now provide support for Amazon Cognito and Amazon CloudWatch Logs. Resource control policies (RCPs) are a type of organization policy that you can use to manage permissions in your organization.