Using Cognito groups to control access to API endpoints

Identity Provider Cloud Computing Identity And Access Management

JSON Web Token Landing Page
1

JSON Web Token

JSON Web Tokens are an open, industry standard RFC 7519 method for representing claims securely between two parties.
Pricing:
- Open Source
Both the ID and access tokens are JSON Web Tokens (JWT) and contain the group information as a claim. I will cover the difference between ID and access tokens in another article.

#Identity Provider #Identity And Access Management #SSO 276 social mentions
AWS Lambda Landing Page
2

AWS Lambda

Automatic, event-driven compute service
Pricing:
- Open Source
We will protect both endpoints with a custom authorizer, which is a Lambda function. The authorizer will verify, decode and extract the group information from the token, and allows or denies the request.

#Cloud Computing #Cloud Hosting #Backend As A Service 244 social mentions
Amazon Cognito Landing Page

3

Amazon Cognito

Amazon Cognito lets you add user sign-up, sign-in, and access control to your web and mobile apps quickly and easily. It scales to millions of users and supports sign-in with social identity providers and enterprise identity providers via SAML 2.0.

The company has built their system using AWS products, so it seems reasonable to use Amazon Cognito for setting up the authentication flow and access control.

#Identity Provider #SAML #Identity And Access Management 63 social mentions
Amazon API Gateway Landing Page

4

Amazon API Gateway

Create, publish, maintain, monitor, and secure APIs at any scale

The application will then call an HTTP API created with API Gateway. The API has two endpoints, GET /movies and GET /shows, which return exciting information about movies and shows, respectively.

#API Tools #APIs #Web Service Automation 94 social mentions
Amazon AWS Landing Page

5

Amazon AWS

Amazon Web Services offers reliable, scalable, and inexpensive cloud computing services. Free to join, pay only for what you use.

The company has built their system using AWS products, so it seems reasonable to use Amazon Cognito for setting up the authentication flow and access control.

#Cloud Computing #Cloud Infrastructure #IaaS 360 social mentions