logo
Expand description

Amazon Cognito Federated Identities

Amazon Cognito Federated Identities is a web service that delivers scoped temporary credentials to mobile devices and other untrusted environments. It uniquely identifies a device and supplies the user with a consistent identity over the lifetime of an application.

Using Amazon Cognito Federated Identities, you can enable authentication with one or more third-party identity providers (Facebook, Google, or Login with Amazon) or an Amazon Cognito user pool, and you can also choose to support unauthenticated access from your app. Cognito delivers a unique identifier for each user and acts as an OpenID token provider trusted by AWS Security Token Service (STS) to access temporary, limited-privilege AWS credentials.

For a description of the authentication flow from the Amazon Cognito Developer Guide see Authentication Flow.

For more information see Amazon Cognito Federated Identities.

If you’re using the service, you’re probably looking for CognitoIdentityClient and CognitoIdentity.

Structs

A client for the Amazon Cognito Identity API.

A provider representing an Amazon Cognito user pool and its client ID.

Provides AWS credentials from aws Cognito.

A builder for the Cognito credential provider.

Input to the CreateIdentityPool action.

Credentials for the provided identity ID.

Input to the DeleteIdentities action.

Returned in response to a successful DeleteIdentities operation.

Input to the DeleteIdentityPool action.

Input to the DescribeIdentity action.

Input to the DescribeIdentityPool action.

Input to the GetCredentialsForIdentity action.

Returned in response to a successful GetCredentialsForIdentity operation.

Input to the GetId action.

Returned in response to a GetId request.

Input to the GetIdentityPoolRoles action.

Returned in response to a successful GetIdentityPoolRoles operation.

Input to the GetOpenIdTokenForDeveloperIdentity action.

Returned in response to a successful GetOpenIdTokenForDeveloperIdentity request.

Input to the GetOpenIdToken action.

Returned in response to a successful GetOpenIdToken request.

A description of the identity.

An object representing an Amazon Cognito identity pool.

A description of the identity pool.

Input to the ListIdentities action.

The response to a ListIdentities request.

Input to the ListIdentityPools action.

The result of a successful ListIdentityPools action.

Input to the LookupDeveloperIdentityInput action.

Returned in response to a successful LookupDeveloperIdentity action.

A rule that maps a claim name, a claim value, and a match type to a role ARN.

Input to the MergeDeveloperIdentities action.

Returned in response to a successful MergeDeveloperIdentities action.

A role mapping.

A container for rules.

Input to the SetIdentityPoolRoles action.

Input to the UnlinkDeveloperIdentity action.

Input to the UnlinkIdentity action.

An array of UnprocessedIdentityId objects, each of which contains an ErrorCode and IdentityId.

Enums

Errors returned by CreateIdentityPool

Errors returned by DeleteIdentities

Errors returned by DeleteIdentityPool

Errors returned by DescribeIdentity

Errors returned by DescribeIdentityPool

Errors returned by GetCredentialsForIdentity

Errors returned by GetId

Errors returned by GetIdentityPoolRoles

Errors returned by GetOpenIdToken

Errors returned by GetOpenIdTokenForDeveloperIdentity

Errors returned by GetPrincipalTagAttributeMap

Errors returned by ListIdentities

Errors returned by ListIdentityPools

Errors returned by ListTagsForResource

Errors returned by LookupDeveloperIdentity

Errors returned by MergeDeveloperIdentities

Errors returned by SetIdentityPoolRoles

Errors returned by SetPrincipalTagAttributeMap

Errors returned by TagResource

Errors returned by UnlinkDeveloperIdentity

Errors returned by UnlinkIdentity

Errors returned by UntagResource

Errors returned by UpdateIdentityPool

Traits

Trait representing the capabilities of the Amazon Cognito Identity API. Amazon Cognito Identity clients implement this trait.