Controlling access in service-to-service communications with Cognito - Part 2

1

AWS Lambda

Obviously, Bob won't use Postman to get the token and invoke the API. Instead, one application will call the other service, so he will have to implement the same logic in a Lambda function.

#Cloud Computing #Cloud Hosting #Backend As A Service 249 social mentions

2

Amazon Cognito

Bob has looked for a solution for authorizing requests between the microservices he and his team are developing. He decided to use Amazon Cognito and the client_credentials grant type. This grant is specifically for controlling access in service-to-service communications and follows the OAuth 2.0 standards.

#Identity Provider #SAML #Identity And Access Management 63 social mentions

3

Amazon API Gateway

He will now create a Cognito User Pool authorizer in API Gateway. Bob will then add it to the endpoint he wants to protect, and will define the required permission (scope) for the token validation.

#API Tools #APIs #Web Service Automation 95 social mentions