AWS STS (Security Token Service)
- AWS provides STS as a webservice that enables to request temporary and limited-previlege credentials to users Refer Here
- Actions
- AssumeRole Refer Here
- AssumeRole Refer Here
- STS is used for
- Roles
- Federated users
- External identities can be used to authenticate by using identity provider
- For these external users we need to use STS for authorization
AWS Identity as a Service => AWS Cognito
- Refer Here for the official page of AWS Cognito
- Refer Here for docs
- Refer Here for sample code for MFA to your application
