Using Cognito user ID to set up item-level access control to tables

1

JSON Web Token

When the user signs in, Cognito User pools will issue an ID token, which is a JSON Web Token (JWT). Sub is one of the claims in the token and its value is the user pool ID of the user. It seems intuitive that the sub in the policy variable is the same as the user pool ID sub.

#Identity Provider #Identity And Access Management #SSO 276 social mentions

2

AWS Identity and Access Management

It's great, but where will IAM get the sub's value from? The ${cognito-identity.amazonaws.com:sub} policy variable refers to it, so there must be something somewhere that contains a sub property.

#Identity And Access Management #Identity Provider #SSO 52 social mentions