re:Inforce 2022 - IAM306: Managing B2B identity at scale

Wed, 27 Jul 2022 00:00:00 +0000

I had the amazing opportunity to co-present a session at AWS re:Inforce 2022. My co-presenter was Suresh Sridharan, a product manager on the Amazon Cognito team.

If you’re not familiar with AWS re:Inforce, it’s an annual Amazon Web Services conference focused on security. It’s quite a bit smaller than re:Invent, their conference targeting builders, but that is actually a massive draw for me because I’ve found that re:Invent has gotten a bit big. I appreciate the focus and the relative ease of navigating a single site rather than what seems to be the entire Las Vegas Strip.

Suresh talked about a variety of options that Cognito customers have for managing multi-tenant solutions, and I talked about the particular choices that our team has made and what took us down this path.

For the full details, check out the slides and the recording.

Enriching Amazon Cognito features with an Amazon API Gateway proxy

Wed, 30 Mar 2022 00:00:00 +0000

I read a great post about protecting Amazon Cognito with an Amazon CloudFront proxy and wondered if using an Amazon API Gateway proxy instead would work better.

It really really did. Being able to use the full power of Lambda was fantastic, and the performance was improved significantly.

This approach also let us quickly implement a few tiny features that Cognito doesn’t have yet, like server-side attribute validation and user lifecycle events.

I got in touch with the author of the original post and he was generous enough to offer a collaboration on a follow-up post on the AWS architecture blog.

Check out the full post for all the details.

Cognito on Geoff Baskwill

re:Inforce 2022 - IAM306: Managing B2B identity at scale

Enriching Amazon Cognito features with an Amazon API Gateway proxy