saas-identity-cognito | AWS Quick Start Team | Continuous Deployment library
kandi X-RAY | saas-identity-cognito Summary
kandi X-RAY | saas-identity-cognito Summary
AWS Quick Start Team
Support
Quality
Security
License
Reuse
Top functions reviewed by kandi - BETA
Currently covering the most popular Java, JavaScript and Python libraries. See a Sample of saas-identity-cognito
saas-identity-cognito Key Features
saas-identity-cognito Examples and Code Snippets
Community Discussions
Trending Discussions on saas-identity-cognito
QUESTION
I am designing a solution on AWS that utilizes Cognito for user management.
I am using this Quick Start as a starting point:
With one significant change: I plan to make this serverless. So no ECS containers to host the services. I will host my UI on S3.
My one question lies with the 'auth-manager' used in the existing solution, and found on github:
Basically, this layer is used by the UI to facilitate interaction with Cognito. However, I don't see an advantage to doing it this way vs. simply moving these Cognito calls into the front-end web application. Am I missing something? I know that such a Node layer may be advantageous for providing a caching layer but I think I could just utilize Elasticache(Redis)as a service if I needed that.
Am I missing something? If I simply moved this Node auth-manager piece into my S3 static Javascript application, am I losing something?
Thanks in advance.
...ANSWER
Answered 2018-Sep-20 at 16:41It looks like its pulling some info from
https://github.com/aws-quickstart/saas-identity-cognito/blob/master/app/source/shared-modules/config-helper/config.js
QUESTION
Setup I am working through "Saas identity and isolation with Amazon Cognito" deployment guide and accompanying source code.
After deploying, testing, and reading everything, I was able to figure out
- How to work with Cognito users/user pools per tenant
- How to create roles per tenant
- How to create tenant based policies
- How to create identity pools per tenant
Main Question How does it all tie together? Specifically, How does user in a tenant user pool get associated with a policy in an identity pool? There seems to be some hand waving around "Get Access Token (with IAM policies)". How does that work? How do the custom authorizers fit in?
More information I believe that it has to do with token-manager.js:346
...ANSWER
Answered 2018-Aug-31 at 18:32The roles are associated internally by cognito identity pools. The following code shows that we map this through configuration.
Community Discussions, Code Snippets contain sources that include Stack Exchange Network
Vulnerabilities
No vulnerabilities reported
Install saas-identity-cognito
Support
Reuse Trending Solutions
Find, review, and download reusable Libraries, Code Snippets, Cloud APIs from over 650 million Knowledge Items
Find more librariesStay Updated
Subscribe to our newsletter for trending solutions and developer bootcamps
Share this Page