Amazon Cognito

With Amazon's support, we were able to complete what we were looking to accomplish. If you have an administrator that has been working in the AWS environment for a while they can assist with some of your questions. But save yourself time and open up a ticket with support and just get a tech on the line and have them walk you through the steps and you will be able to complete all the setup with minimal issues.

If you are looking to deploy a web application without the need of integrating without an identity provider and still want access control, 2-factor authentication or want social identity federation. A solution that can be scalable and secure if you are unable to predict the response from the customers at the point in time. If you want to automate analytics after a user authenticates, then Amazon Cognito is suitable.

Amazon Cognito is ideal for developers looking to create a secure login experience for their own apps, and set up authentication in their app very quickly and easily.

Amazon Cognito is a good solution for businesses looking to secure their login process across remote / global entities. It provides an added verification step to ensure data is protected from bad actors or unauthorized users looking to steal your data. This wouldn't be a necessary product for someone who doesn't store sensitive data or information.

If you have a simple app or any app that needs to manage users; you can delegate this to Amazon Cognito. You don't need to waste time thinking and building the sign-in process, where to store users, groups, credentials, etc. Cognito does all that for you, and if you want to go further you can also use Federate Services.

Amazon Cognito is a very useful authentication solution for web applications along with mobile applications. It is easy to use and integrate.
It can be useful for scenarios like:
- Website/Application that requires for its users with email or social sign-in (Like Sign In with Facebook or Google).
- It is also has a customizable login screen, so some customization can be done to it easily.

For startups, this solution is highly expensive but it is one of the most secure platforms out there. A technical person can easily understand the nuances and implement it to make the platforms more interactive. If the platform can be used without internet access or if offline sync is available - it'll make an even better solution.

For the cost (it's very cheap!) this product is a no-brainer. It allows us to add Google Sign in to some of our most used company apps. It has a quick learning curve (for setup AND use). Connects to the Amazon servers quickly for authentication and the users no longer need to manage so many logins.

If you are working strongly with AWS technologies, Cognito is the way to go. On the other hand, if you work strongly with mobile technologies and federated identities, you could prefer firebase.

Being in the AWS ecosystem makes Cognito a strong contender. We needed a kind of user manager for our public websites after moving to AWS. Cognito is the service suitable for this and it does fulfill our requirements. Though we are still in the process of moving, the tests are going great.

This is a plug and play kind of service for sign-in, signup and access control. As this is a managed service, one need not take care of scale and other infrastructure issues. When the user scale is to a large extent or special compliance like HIPAA required, this one is worth trying. For a smaller user base, I prefer to go with the traditional approach.

Amazon Cognito is great for small, internal tools and for integrating with Amazon's serverless products. I would review its features very carefully if I were considering it for a larger, public-facing application because I believe that migrating off of Cognito would be problematic. Cognito is great for internal tools; for example, it has allowed our data scientists to build annotation tools with managed user pools without requiring engineering support.

It's well suited for quick start of application, which needs to be integrated with multiple other applications. It may be not suited for applications which are already using high security in place, meaning if customers are already using OAuth, then I don't think this would be an effective solution.