Controlling access to resources with Cognito groups and IAM roles

1

JSON Web Token

After the user has successfully authenticated, the user pool will return an ID token, which is a JSON Web Token (JWT).

#Identity Provider #Identity And Access Management #SSO 276 social mentions

2

AWS Identity and Access Management

Say we have an application where we place users in multiple groups based on their permission sets. I'm not talking about IAM but application users, who sign up, log in and use our application. Those users can be administrators, read-only users, or can belong to other permission categories. I already discussed a way we can use Cognito user pool groups in access control to specific endpoints.

#Identity And Access Management #Identity Provider #SSO 52 social mentions

3

DynamoDB

In this example, we'll have an architecture with Cognito User pools, IAM roles, Identity pools, and DynamoDB.

#Databases #NoSQL Databases #Relational Databases 101 social mentions

4

AWS ElasticWolf Client Console

But it's not the only way we to control access with Cognito groups. We can assign them IAM roles and allow (or deny) the groups' users access to AWS resources directly from our application. Identity pools will do a large chunk of the job, but tools like AWS SDK can provide a simplified, abstract interface to perform the same logic.

#Developer Tools #Weather Apps #Weather API 18 social mentions

5

AWS Mobile Services

Using React and Amplify, we can write a very simple component like this:.

#Developer Tools #Realtime Backend / API #App Development 77 social mentions