Aws Cognito User Pool Vs Identity Pool

Choose manage user pools.

Aws cognito user pool vs identity pool. To create a user pool. Because identity pools map a user from an identity provider to an iam role they essentially allow you to delegate authorization for aws resources to aws itself. We can definitely use it as an api authorizer but only if it s exposed through aws api gateway. Identity pools are for authorization access control.

The cognito user pool stores all your users which then plugs into your cognito identity pool which can give your users access to your aws services. Aws cognito has its own identity provider using user pools which are explained below but it can also integrate with well established third party identity providers like facebook and google. The process of integrating with a third party for authentication is called federation. You can create unique identities for your users and federate them with your identity providers.

Using identity pools users can obtain temporary aws credentials to access other aws services. English cognito 사용자 풀과 자격 증명 풀 간의 차이점에 대해 자주 질문하므로 자세히 다루는 것이 좋겠습니다. You may be prompted for your aws credentials. You can use identity pools to create unique identities for users and give them access to other aws services.

User pools provides us with a json web token so we can use it as an authorizer for any existing api while with identity pools we get temporary aws credentials which means that is meant to utilize aws resources. With the built in hosted web ui amazon cognito provides token handling and management for all authenticated users so your backend systems can standardize on one set of user pool tokens. User pools are for authentication identify verification. The cognito identity pool simply takes all your identity providers and puts them together federates them.

You can add a social identity provider in the aws management console with the aws cli or using amazon cognito api calls. Cognito identity pools federated identities provides different functionality compared to user pools. Go to the amazon cognito console. And with all of this it can now give your users secure access to your aws services regardless of where they come from.

이 두 가지는 기능면에서 조금 비슷해 보일 수 있으며 그것이 무엇인지를 명확하게 밝히지는 못합니다. Edit this page view history view this page in. Cognito user pool vs identity pool. This is thecritical distinction between user pools and identity pools.

Provide a name for your user pool and choose review defaults to save the name. Identity pools are used for user authorization. Additionally cognito can integrate with any identity provider that implements the saml or oauth2 protocols.