Amazon Cognito Beginner Guide

[@kashifsohail8756]

OMG . Are you kidding me ? . I cant believe such an excellent presentation is available on this topic . it has got all what i need , Hats off to you man

[@BeABetterDev]

Thank you so much for your kind comment!

[@gavincoulson3900]

Literally couldn't have had better time in making this video! We just started using cognito at work!

[@BeABetterDev]

Thanks Gavin! Hope the video helps :)

[@andrewkicha1628]

This presentation of the Cognito service is brilliant. All the important details fit in 25 minutes. Thank you.

[@BeABetterDev]

Thanks so much Andrew and glad you enjoyed!

[@vijaynadkarni]

This is an amazing video that explained all I needed to know about what Cognito does and how to set it up for my company's needs. Very well done! Amazon's native documentation on Cognito, although comprehensive, makes an assumption that the user has an in-depth knowledge of authentication & authorization (which is not the case with me). This video helped me understand in easy-to-understand terms what I needed to go ahead and set it up.

[@jaredharp9815]

You sir, should be getting paid by AWS for these videos! This was such a great explanation and lucid intro to Cognito. Like seriously, 10/10 job. Thanks again, I will definitely be liking and checking out your other videos 👍

[@oluwaseyiorifunmishe4144]

Dude!! You’re good at this. You reduce the complexity of cognito, by an order of magnitude.

[@BeABetterDev]

thank you so much!!!

[@Confusedcapybara8772]

This is exactly what ive been looking for! Thanks man! I appreciate you showing multiple options on how to do something

[@BeABetterDev]

Glad I could help!

[@ozworth]

Concise and to the point. Excellent video!

[@Exevan110]

Very good video. Even with the now outdated ui, this clearly explains user pools and identity pools as well as the differences and their usecases.

[@Misantronic]

A note on that: I love cognito, it‘s a great service which fulfills all my needs. However, I have 2 pain-points which are quite annoying to get by: - documention is (as for most services) absolute hell. it‘s all there - somewhere. you just need to guess the right words to find what you want to achieve in the docs or somewhere at stackoverflow - it‘s not fast. logging in or refreshing a session sometimes takes a few seconds which can be painfully blocking. additionally, aws-amplify was such an overkill for me that I decided to just go with the aws-sdk and it‘s js-client libs. they‘re much more straight forward and don‘t require a whole bootstrap setup. still, great videos like yours are an immense help for beginners and also advancaed users as well.

[@BeABetterDev]

Thanks for the great insight Misan! Definitely agree on the documentation point - it was a painful process to navigate it all to learn what I have. Cheers

[@ewenreynolds]

Thank you so much for this clear and well presented tutorial. Subscribed 😊

[@pythonfamily]

brooo I have been following your YT channel and all the information you share is AMAZING. Thanks a looot

[@khanriza]

Awesome video. Came in timely manner as we're working on adding Cognito to our app :)

[@BeABetterDev]

Glad it was helpful Riza!

[@islamh6042]

Wow, clear points in the goal, thanks for this a very good illustration.

[@shamrozanjum]

Very well, slow and detailed. Thank you

[@deepcoolclear]

Thanks this was very clear and informative explanation. Are you able to update the configure screens for 2024 or are they the same? Is there a place where you can go to audit or view all the IAM roles configured using basic Token Auth as you show for Identity pools ?

[@Joelvarghese6]

Thank you so much bro, really helpful video. Your channel is the main resource i look when i have any doubt in aws.

Thanks for the awesome video. Amazon should hire you.

[@DavidRichardsDC]

I love your videos and have subscribed. your info is very helpful! Some of the best I have found! I hope I am not out of place suggesting something: the vocal recording is quite "boomy" as they say in the recording business which can make it hard to listen on some systems and there are easy fixes: grab a free EQ (like Audacity) and make a cut in the 100-300 Hz range. If you want to sound great on YT: 4db cut at 125Hz, 2db boost at 2k Hz and high pass filter below 100 Hz. Also, experiment with speaking from 6-12 inches from your mic to avoid the "proximity effect" which is mostly an issue for deeper voices with better quality mics.

[@BeABetterDev]

Hi Richard, thank you so much for the feedback! I'm going to look into your tips more and see if I can make some adjustments. Do you have any suggestions for articles/tutorials to get this set up properly? I'm currently using a audio mixer called VoiceeMeter and thought I had it configured correctly but apparently not :(

[@DavidRichardsDC]

@@BeABetterDev I just looked at VoiceMeeter as I wasn't familiar. From a glance it looks like they have the basic "Bass" "Midrange" "Treble" control, but I think the biggest factor is the HPF which maybe isn't in there. High pass filter rolls off anything below a set frequency. I also have a deeper voice and will usually set my HPF to around 100Hz. I am not sure if this workflow would work, but you could literally just dump your audio in Audaicy which is a free and pretty high quality tool, then use the EQ in the filter dropdown menu and then export the resulting audo as a wav file or mp3 or whatever you prefer. That is one option. Another free tool might be Cakewalk by Bandlab which is mostly for multitracking music, but you can also track video in there. Those are some free ideas. If you are willing to drop some cash: Izotope is an industry standard. I use their products extensively for music production. But, they are also used for radio, dialog in general, podcasts... Check this page: www.izotope.com/en/learn/audio-repair/dialogue-editing.html

[@saarangslt3327]

Simply amazing. Thank you

[@BeABetterDev]

Thank you!

[@NaveedAli-n5g]

Great video, thank you very much for this! ❤

[@atedemx]

I like cognito, and feel like I will still choose it over auth0 , but it still has poor documentation, you should talk about sessions and how cognito fails with access and refresh tokens as well as how it becomes expensive when going through different scenarios say adding flags to validate flows and challenges if you are working on more complex user authentication ( say multiple customers, invites, etc etc.). Still it is a great video introducing Cognito and your work is always amazing. I feel that you could do a couple of videos, based on your experience mentioning challenges faced with some AWS services that maybe a small project or company won`t face but that huge products and highly available systems will definitely do 👍 Again, awesome work and keep it going!

[@lmind2]

@Arturo Borbolla - can you please expand on this? Do you have examples of cost thresholds when adding complexity? Is there a viable, cheaper alternative when complexity is needed?

[@TigranGevorgyan-vm8rc]

Thank you, this was informative!

[@Diego-eb9we]

Thanks for this amazing video!

[@komalthecoolk]

The content is impeccable. Shows that all of this is coming from experience. Some people are knowledgeable, some people can teach well, you can do both great! On a side note, why is there SO MUCH BASS in your voice? It's hard to listen on big speakers or in the car while driving to work etc. Lot of boomy noise.

[@simonshkilevich3032]

dude, this video is amazing

[@vercettigameplays]

Great video. Content sugestion: create a passwordless authentication with Cognito using Triggers.

[@BeABetterDev]

Great suggestion! Thanks Higor.

[@liamsmith7479]

This is really good, thanks a ton.

[@sufianhaq]

Thanks for the video. Really loved how you explained it for practical use as well.

[@pedrofreitaslima]

Thanks you this video is great explain the concepts and core. But i could to show examples using programming languages, and explore more about integrations app using examples

[@vimalpatel5770]

Excellent explanation! Thanks for this nice video. I have a question here. I am beginner so not much knowledge however how to setup AWS Cognito (with SSO) for multi-region considering DR as the critical requirement.

[@sharanbabu2001]

Great video! Can you make a video on Elastic Beanstalk flask api vs lambda for the same? How many concurrent requests can ELB actually handle?

[@teetanrobotics5363]

Would request for the same

[@tunalikethefish]

Great summary, thank you. They should link this directly from the AWS page :)

[@Sukanya-xh7ij]

can I use cognito for the applications hosted in onprem data center, VM Ware OR any other Private Cloud ?

[@Entertainment-by9ci]

If a user, authenticated through Cognito, has the ability to assume multiple IAM roles with distinct S3 permissions, will these permissions be aggregated, allowing the user to access S3 objects based on the combined set of permissions from all assumed roles?

[@tech3425]

Would appreciate a hands on coding video using cognito

[@thinhlpg]

Thank you so much!

[@leamon9024]

Thanks for the video. Could you also make one about how ECS is integrated with ALB and API Gateway with Cognito? Thanks

[@TheCodeholic]

Thanks for this brief explanation. It was very informative. Do you have more videos about AWS Cognito, like a hands on integration into actual applications?

[@lesptitsoiseaux]

If you have users using OTP and want to move over to Cognito and ensure they can also log in user SSO, how do you do that?

[@superwsuperw]

Great work! In the use case, how does your own backend server validate Cognito token?

[@BeABetterDev]

Hi there, good question! There's some well documented steps on how to validate the token here: docs.aws.amazon.com/cognito/latest/developerguide/amazon-cognito-user-pools-using-tokens-verifying-a-jwt.html In short, first you validate the format of the token before validating the token itself with a private key offered by Cognito for your user pool. Hope this helps

[@ankushjain358]

Amazing video!

[@WayneCarlBarker]

Is it really secure to send an authentication token through URL? Seems like a bad idea.

[@N7SOLDIER]

Good to know.

[@BeABetterDev]

Thanks!

[@cairink2110]

Not being able to signout from the amazon provider. Automatically being signed in, instead of showing the sign form. Any Solutions?

[@ayanrafiqi7353]

is there any option of getting a token besides the URL, Actually I fetch the access token from the URL and then validate it from my frontend(js) via API headers but it has a security flaw, upon login, it shows my Access token in the URL or is there any option to hide it

[@NeoInTheMatrix680]

nice. thanks

[@brentmarquez4157]

Thanks for the video and great explanation as usual. Could you elaborate more on "other options to integrate directly in your app" outside of the hosted UI at 13:23? What are the tradeoffs if not using the hosted UI? Do you take on more security burden and liability/maintenance? Is it significantly difficult to integrate? trying to decide whether to use the hosted UI or build our own signup form to look more internal to an app, but am not sure how to weigh the pros and cons.

[@ronytesler]

Where is the link to the left part at 15:33?

[@zainul1266]

How to connect Cognito with Spring boot application ?

[@tech3425]

Gold

[@Sub0x-x40]

literally just turned off my college lecture to watch this

[@haha-eg8fj]

This all goes well when using a hosted UI. If I need to use my own authentication UI (for different languages) it becomes hell of a mess.

[@shamstabrez2986]

u should upload more videos on cognito with lab

[@AmitPawar-oj3yw]

Nice video

[@madrag]

Nice video, but using implicit flow and / or tokens in url is antipattern this days....

[@rob3c]

Cognito does support PKCE (although I don't think you can enforce its use)

[@pablogonzalezrobles4429]

It is sad that cognito does not have support for flutter web. Luckly I understand enough angular to make my frontend but Flutter would be easier for me

[@RishiRajxtrim]

🎉

[@yeahyalikedat]

👏

[@nikhilgoyal007]

@how to diagram @15:00

[@goldie75c]

If only cognito would support localisation of the hosted UI. It is 2022 and they support only the English language!??

[@vincentnthomas1]

Man for your own security migrate away from last pass, they’ve had multiple breaches