https://geoffbaskwill.ca/tags/apigateway/ Geoff Baskwill (Apigateway) Hugo -- gohugo.io en-ca Wed, 30 Mar 2022 00:00:00 +0000 https://geoffbaskwill.ca/posts/enriching-cognito-features-with-apigateway/ Wed, 30 Mar 2022 00:00:00 +0000 https://geoffbaskwill.ca/posts/enriching-cognito-features-with-apigateway/ <p>I read a great post about <a href="https://aws.amazon.com/blogs/security/protect-public-clients-for-amazon-cognito-by-using-an-amazon-cloudfront-proxy/">protecting Amazon Cognito with an Amazon CloudFront proxy</a> and wondered if using an Amazon API Gateway proxy instead would work better.</p> <p><img src="images/architecture.png" alt="" title="Amazon Cognito protected by a proxy function that rewrites requests using the client secret after they have passed through AWS WAF and Amazon API Gateway for rate limiting and other preventative controls."></p> <p>It really really did. Being able to use the full power of Lambda was fantastic, and the performance was improved significantly.</p> <p>This approach also let us quickly implement a few tiny features that Cognito doesn&rsquo;t have yet, like server-side attribute validation and user lifecycle events.</p> <p>I got in touch with the author of the original post and he was generous enough to offer a collaboration on a follow-up post on the AWS architecture blog.</p> <p>Check out <a href="https://aws.amazon.com/blogs/architecture/enriching-amazon-cognito-features-with-an-amazon-api-gateway-proxy/">the full post</a> for all the details.</p>