AWS Cognito

• Cognito is used for Authentication and Authorizations for your applications,
• These Applications can be hosted on AWS & works with On-premises as well.
• Identity pools: These are used to store the user information from various authentication providers
  • Cognito: Users need to register/signup
  • Amazon: Can login with Amazon accounts
  • Google+ : Can login with Google accounts
• Refer Here for the public identity providers
  
• Refer Here for the python example for cognito pools and also Refer Here
• To bring in users from your organization into AWS we have two options
  • AWS Managed AD
  • AD Connect Refer Here